@haven_ai/sdk 0.11.0-alpha.0 → 0.13.0-alpha.0

package/dist/{chunk-DXBAN4SN.cjs → chunk-Z5MTKU6O.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkMZKLAHBK_cjs = require('./chunk-MZKLAHBK.cjs');
+var chunkLZHCIK7L_cjs = require('./chunk-LZHCIK7L.cjs');
 var ethers = require('ethers');
 var viem = require('viem');
 
@@ -18,7 +18,7 @@ function delegationDomainSeparator(chainId) {
         viem.keccak256(viem.toBytes("DelegationManager")),
         viem.keccak256(viem.toBytes("1")),
         BigInt(chainId),
-        chunkMZKLAHBK_cjs.DELEGATION_MANAGER
+        chunkLZHCIK7L_cjs.DELEGATION_MANAGER
       ]
     )
   );
@@ -102,5 +102,5 @@ function verifyPaymentReceipt(receipt, recover = defaultRecover) {
 
 exports.RECEIPT_VERSION = RECEIPT_VERSION;
 exports.verifyPaymentReceipt = verifyPaymentReceipt;
-//# sourceMappingURL=chunk-DXBAN4SN.cjs.map
-//# sourceMappingURL=chunk-DXBAN4SN.cjs.map
+//# sourceMappingURL=chunk-Z5MTKU6O.cjs.map
+//# sourceMappingURL=chunk-Z5MTKU6O.cjs.map

package/dist/chunk-Z5MTKU6O.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/receipt.ts"],"names":["keccak256","toBytes","encodeAbiParameters","DELEGATION_MANAGER","concatHex","ethers"],"mappings":";;;;;;AA6CO,IAAM,eAAA,GAAkB;AA8E/B,IAAM,+CAAoD,IAAI,GAAA,CAAI,CAAC,IAAA,EAAM,KAAK,CAAC,CAAA;AAE/E,IAAM,sBAAA,GAAyBA,cAAA;AAAA,EAC7BC,aAAQ,oFAAoF;AAC9F,CAAA;AAOA,SAAS,0BAA0B,OAAA,EAAsB;AACvD,EAAA,OAAOD,cAAA;AAAA,IACLE,wBAAA;AAAA,MACE,CAAC,EAAE,IAAA,EAAM,SAAA,IAAa,EAAE,IAAA,EAAM,WAAU,EAAG,EAAE,MAAM,SAAA,EAAU,EAAG,EAAE,IAAA,EAAM,SAAA,IAAa,EAAE,IAAA,EAAM,WAAW,CAAA;AAAA,MACxG;AAAA,QACE,sBAAA;AAAA,QACAF,cAAA,CAAUC,YAAA,CAAQ,mBAAmB,CAAC,CAAA;AAAA,QACtCD,cAAA,CAAUC,YAAA,CAAQ,GAAG,CAAC,CAAA;AAAA,QACtB,OAAO,OAAO,CAAA;AAAA,QACdE;AAAA;AACF;AACF,GACF;AACF;AAGA,SAAS,gBAAA,CAAiB,YAAoB,OAAA,EAAsB;AAClE,EAAA,OAAOH,cAAA,CAAUI,eAAU,CAAC,QAAA,EAAU,0BAA0B,OAAO,CAAA,EAAG,UAAiB,CAAC,CAAC,CAAA;AAC/F;AAGA,SAAS,cAAA,CAAe,MAAc,SAAA,EAA2B;AAC/D,EAAA,OAAOC,aAAA,CAAO,cAAA,CAAe,IAAA,EAAM,SAAS,CAAA;AAC9C;AAEA,IAAM,oBAAA,GAAuB,EAAE,QAAA,EAAU,KAAA,EAAO,QAAQ,sBAAA,EAAuB;AAS/E,SAAS,KAAA,CAAM,QAAA,EAAkB,IAAA,EAAc,SAAA,EAAmB,OAAA,EAAiC;AACjG,EAAA,IAAI,SAAA;AACJ,EAAA,IAAI;AACF,IAAA,SAAA,GAAY,OAAA,CAAQ,MAAM,SAAS,CAAA;AAAA,EACrC,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,eAAA,EAAgB;AAAA,EAC9C;AACA,EAAA,IAAI,SAAA,CAAU,WAAA,EAAY,KAAM,QAAA,CAAS,aAAY,EAAG;AACtD,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,iBAAA,EAAmB,iBAAiB,SAAA,EAAU;AAAA,EAC5E;AACA,EAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,eAAA,EAAiB,SAAA,EAAU;AAChD;AAEA,SAAS,MAAA,CAAO,QAAqB,YAAA,EAAsE;AACzG,EAAA,IAAI,OAAO,EAAA,EAAI;AACb,IAAA,OAAO,EAAE,QAAA,EAAU,IAAA,EAAM,eAAA,EAAiB,MAAA,CAAO,iBAAiB,YAAA,EAAa;AAAA,EACjF;AACA,EAAA,OAAO,OAAO,eAAA,KAAoB,MAAA,GAC9B,EAAE,QAAA,EAAU,KAAA,EAAO,QAAQ,MAAA,CAAO,MAAA,EAAQ,eAAA,EAAiB,MAAA,CAAO,iBAAgB,GAClF,EAAE,UAAU,KAAA,EAAO,MAAA,EAAQ,OAAO,MAAA,EAAO;AAC/C;AAcO,SAAS,oBAAA,CACd,OAAA,EACA,OAAA,GAAqB,cAAA,EACA;AAGrB,EAAA,IAAI,OAAO,OAAA,KAAY,QAAA,IAAY,OAAA,KAAY,MAAM,OAAO,oBAAA;AAC5D,EAAA,IAAI,MAAA,GAAS,OAAA;AAYb,EAAA,IAAI,OAAO,MAAA,CAAO,aAAA,KAAkB,QAAA,IAAY,MAAA,CAAO,kBAAkB,IAAA,EAAM;AAC7E,IAAA,IAAI,OAAO,MAAA,CAAO,OAAA,KAAY,QAAA,IAAY,MAAA,CAAO,YAAY,IAAA,EAAM;AACjE,MAAA,OAAO,oBAAA;AAAA,IACT;AACA,IAAA,MAAA,GAAS,MAAA,CAAO,OAAA;AAAA,EAClB;AACA,EAAA,IAAI,OAAO,MAAA,CAAO,aAAA,KAAkB,QAAA,IAAY,MAAA,CAAO,kBAAkB,IAAA,EAAM;AAC7E,IAAA,OAAO,oBAAA;AAAA,EACT;AACA,EAAA,MAAM,OAAO,MAAA,CAAO,aAAA;AAMpB,EAAA,MAAM,EAAE,QAAA,EAAU,QAAA,EAAU,SAAA,EAAW,iBAAgB,GAAI,IAAA;AAC3D,EAAA,IAAI,OAAO,aAAa,QAAA,IAAY,QAAA,KAAa,MAAM,OAAO,QAAA,KAAa,QAAA,IAAY,QAAA,KAAa,EAAA,EAAI;AACtG,IAAA,OAAO,oBAAA;AAAA,EACT;AACA,EAAA,IAAI,OAAO,SAAA,KAAc,QAAA,IAAY,SAAA,KAAc,EAAA,EAAI;AACrD,IAAA,OAAO,EAAE,QAAA,EAAU,KAAA,EAAO,MAAA,EAAQ,mBAAA,EAAoB;AAAA,EACxD;AAEA,EAAA,MAAM,OAAA,GACJ,OAAO,MAAA,CAAO,OAAA,EAAS,YAAY,QAAA,GAAW,MAAA,CAAO,QAAQ,OAAA,GAAU,MAAA;AACzE,EAAA,MAAM,gBAAA,GAAmB,OAAA,KAAY,MAAA,IAAa,4BAAA,CAA6B,IAAI,OAAO,CAAA;AAK1F,EAAA,IAAI,oBAAoB,eAAA,EAAiB;AACvC,IAAA,OAAO,EAAE,QAAA,EAAU,KAAA,EAAO,MAAA,EAAQ,wBAAA,EAAyB;AAAA,EAC7D;AAIA,EAAA,IAAI,oBAAoB,mBAAA,EAAqB;AAC3C,IAAA,IAAI,CAAC,gBAAA,EAAkB;AACrB,MAAA,OAAO,EAAE,QAAA,EAAU,KAAA,EAAO,MAAA,EAAQ,wBAAA,EAAyB;AAAA,IAC7D;AACA,IAAA,IAAI,MAAA;AACJ,IAAA,IAAI;AACF,MAAA,MAAA,GAAS,gBAAA,CAAiB,UAAU,OAAiB,CAAA;AAAA,IACvD,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,EAAE,QAAA,EAAU,KAAA,EAAO,MAAA,EAAQ,eAAA,EAAgB;AAAA,IACpD;AACA,IAAA,OAAO,OAAO,KAAA,CAAM,QAAA,EAAU,QAAQ,SAAA,EAAW,OAAO,GAAG,mBAAmB,CAAA;AAAA,EAChF;AAMA,EAAA,MAAM,GAAA,GAAM,KAAA,CAAM,QAAA,EAAU,QAAA,EAAU,WAAW,OAAO,CAAA;AACxD,EAAA,IAAI,GAAA,CAAI,EAAA,EAAI,OAAO,MAAA,CAAO,KAAK,WAAW,CAAA;AAC1C,EAAA,IAAI,gBAAA,EAAkB;AACpB,IAAA,IAAI,MAAA;AACJ,IAAA,IAAI;AACF,MAAA,MAAA,GAAS,gBAAA,CAAiB,UAAU,OAAiB,CAAA;AAAA,IACvD,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,MAAA,CAAO,KAAK,WAAW,CAAA;AAAA,IAChC;AACA,IAAA,MAAM,SAAA,GAAY,KAAA,CAAM,QAAA,EAAU,MAAA,EAAQ,WAAW,OAAO,CAAA;AAC5D,IAAA,IAAI,SAAA,CAAU,EAAA,EAAI,OAAO,MAAA,CAAO,WAAW,mBAAmB,CAAA;AAAA,EAChE;AACA,EAAA,OAAO,MAAA,CAAO,KAAK,WAAW,CAAA;AAChC","file":"chunk-Z5MTKU6O.cjs","sourcesContent":["import { ethers } from 'ethers'\nimport { concatHex, encodeAbiParameters, keccak256, toBytes, type Hex } from 'viem'\nimport { DELEGATION_MANAGER } from './settlement-child.js'\nimport type { RawPaymentParties } from './types.js'\n\n/**\n * Verifiable payment receipts.\n *\n * A self-contained bundle for a settled Haven payment whose agent\n * authorisation can be checked offline. What `verifyPaymentReceipt` proves is\n * deliberately narrow: the `payment` block (amount, recipient) is\n * Haven-asserted and is NOT bound by the signature, and `verified: true` never\n * proves the payment settled on-chain — settlement stays an explorer check on\n * `onChain.txHash` / `settlementTxHash`.\n *\n * What `verified: true` means, per scheme:\n *\n * - erc7710 (`authorization.signatureScheme: 'eip712_delegation'`): the bundle\n *   carries the settlement child's EIP-712 struct hash as `signHash`. The\n *   verifier rebuilds the digest the delegate actually signed —\n *   `keccak256(0x1901 ‖ domainSeparator(DelegationManager, chainId) ‖ signHash)`\n *   — from the DelegationManager address the SDK pins and the bundle's\n *   `onChain.chainId`, never from a value the receipt itself vouches for.\n *   `verified: true` means the delegate key signed that settlement delegation\n *   (`verifiedOver: 'delegation_digest'`).\n * - direct payments and the eip3009 funding leg\n *   (`signatureScheme: 'eip712_userop'`) sign an ERC-4337 user operation the\n *   bundle does not carry: they return `not_verifiable_offline` rather than a\n *   false accusation.\n * - retired-rail bundles (no scheme) carry a raw-signed `signHash`; the\n *   verifier recovers over it directly, then over the delegation digest when\n *   the chain allows rebuilding it.\n *\n * Anything that is not a signed bundle — including a `haven_list_receipts`\n * history row, which carries no signature at all — returns\n * `not_a_signed_receipt`. Verification never throws.\n *\n * #3723: the response `GET /payments/{id}/receipt` returns —\n * `{ receipt, verification }` — is accepted AS-IS: when the top level carries\n * no `authorization`, the `.receipt` object inside is verified instead (one\n * level, no recursion). The wrapper's `verification` is never read — it is\n * Haven's own self-check, and trusting it would defeat an offline verifier.\n *\n * This lives in the SDK so agents and users can verify receipts client-side.\n */\nexport const RECEIPT_VERSION = 'haven-receipt-1'\n\nexport interface PaymentReceipt {\n  version: typeof RECEIPT_VERSION\n  paymentId: string\n  payment: {\n    token: string\n    tokenAddress: string\n    amount: string\n    amountSek: string | null\n    recipient: string\n    /** The payer's smart-account address. */\n    account: string\n    /**\n     * #2960: one party vocabulary for \"who paid\", additive alongside `account`\n     * above (which is `parties.treasury_account` only). Optional: a server\n     * from before #2960 emits neither. Ignored by `verifyPaymentReceipt`,\n     * which reads only the bundle's `authorization` and `onChain.chainId`.\n     */\n    parties?: RawPaymentParties\n    chainId: number\n    settledAt: string | null\n    resourceUrl: string | null\n    /**\n     * #3770: the paying agent's own evidence-only verdict on what the\n     * merchant DELIVERED (`ok` / `unusable` / `partial`, plus a bounded\n     * note). Additive and OPTIONAL: a server from before #3770 emits\n     * neither, and `null` means the agent has not reported. Ignored by\n     * `verifyPaymentReceipt`, which reads only the bundle's `authorization`\n     * and `onChain.chainId` — the same rule `parties` follows. Evidence\n     * only: it never changes what the\n     * payment itself is, and `settled`/amounts are untouched by a report.\n     */\n    deliveryQuality?: {\n      quality: 'ok' | 'unusable' | 'partial'\n      note: string | null\n      reportedAt: string | null\n    } | null\n  }\n  /** The agent's cryptographic authorisation — what makes the receipt verifiable. */\n  authorization: {\n    delegate: string\n    signHash: string\n    signature: string | null\n    /**\n     * #3418: which digest the delegate signed — selects what offline\n     * verification rebuilds. `'eip712_delegation'`: the settlement\n     * delegation's EIP-712 digest (erc7710). `'eip712_userop'`: an ERC-4337\n     * user-operation digest the bundle does not carry (direct payments, the\n     * eip3009 funding leg) — not verifiable offline. Absent on retired-rail\n     * bundles and on backends older than #3418, whose `signHash` was signed\n     * raw. The value is only a selector: a lying one cannot make a forged\n     * signature verify, because recovery must still return `delegate`.\n     */\n    signatureScheme?: 'eip712_delegation' | 'eip712_userop'\n  }\n  onChain: {\n    txHash: string | null\n    chainId: number\n  }\n}\n\nexport type ReceiptVerification =\n  | { verified: true; recoveredSigner: string; verifiedOver: 'sign_hash' | 'delegation_digest' }\n  | {\n      verified: false\n      reason:\n        /** #3418: the input is not a haven-receipt-1 bundle (a haven_list_receipts row, null, undefined, a non-object). */\n        | 'not_a_signed_receipt'\n        /** #3418: eip712_userop bundle; or a delegation bundle on a chain the SDK pins no DelegationManager for. */\n        | 'not_verifiable_offline'\n        | 'missing_signature'\n        | 'bad_signature'\n        | 'signer_mismatch'\n      recoveredSigner?: string\n    }\n\n/** Chains whose DelegationManager the SDK pins (same address on both — rails/delegation-contracts.ts). */\nconst DELEGATION_MANAGER_CHAIN_IDS: ReadonlySet<number> = new Set([8453, 84532])\n\nconst EIP712_DOMAIN_TYPEHASH = keccak256(\n  toBytes('EIP712Domain(string name,string version,uint256 chainId,address verifyingContract)'),\n)\n\n/**\n * The EIP-712 domain separator of the DelegationManager on `chainId`, rebuilt\n * from the manager's own constants (name/version, fixed in the contract) and\n * the address the SDK pins — never from a value the receipt vouches for.\n */\nfunction delegationDomainSeparator(chainId: number): Hex {\n  return keccak256(\n    encodeAbiParameters(\n      [{ type: 'bytes32' }, { type: 'bytes32' }, { type: 'bytes32' }, { type: 'uint256' }, { type: 'address' }],\n      [\n        EIP712_DOMAIN_TYPEHASH,\n        keccak256(toBytes('DelegationManager')),\n        keccak256(toBytes('1')),\n        BigInt(chainId),\n        DELEGATION_MANAGER as Hex,\n      ],\n    ),\n  )\n}\n\n/** The EIP-712 digest over a delegation struct hash (what the delegate signs). */\nfunction delegationDigest(structHash: string, chainId: number): Hex {\n  return keccak256(concatHex(['0x1901', delegationDomainSeparator(chainId), structHash as Hex]))\n}\n\n/** Default ECDSA recovery (raw ecrecover over the hash, no message prefix). */\nfunction defaultRecover(hash: string, signature: string): string {\n  return ethers.recoverAddress(hash, signature)\n}\n\nconst NOT_A_SIGNED_RECEIPT = { verified: false, reason: 'not_a_signed_receipt' } as const\n\ntype RecoverFn = (hash: string, signature: string) => string\n\ntype MatchResult =\n  | { ok: true; recoveredSigner: string }\n  | { ok: false; reason: 'bad_signature' | 'signer_mismatch'; recoveredSigner?: string }\n\n/** Recover over one candidate hash and compare the signer with the named delegate. */\nfunction match(delegate: string, hash: string, signature: string, recover: RecoverFn): MatchResult {\n  let recovered: string\n  try {\n    recovered = recover(hash, signature)\n  } catch {\n    return { ok: false, reason: 'bad_signature' }\n  }\n  if (recovered.toLowerCase() !== delegate.toLowerCase()) {\n    return { ok: false, reason: 'signer_mismatch', recoveredSigner: recovered }\n  }\n  return { ok: true, recoveredSigner: recovered }\n}\n\nfunction finish(result: MatchResult, verifiedOver: 'sign_hash' | 'delegation_digest'): ReceiptVerification {\n  if (result.ok) {\n    return { verified: true, recoveredSigner: result.recoveredSigner, verifiedOver }\n  }\n  return result.recoveredSigner !== undefined\n    ? { verified: false, reason: result.reason, recoveredSigner: result.recoveredSigner }\n    : { verified: false, reason: result.reason }\n}\n\n/**\n * Verify a receipt's agent authorisation offline: recover the signer and\n * confirm it is the agent delegate, over whichever digest the bundle's scheme\n * names (see the module doc for what that proves — and what it does not).\n * Never throws: anything that is not a signed receipt — a\n * `haven_list_receipts` history row, null, undefined, a non-object — returns\n * `not_a_signed_receipt`. The `{ receipt, verification }` wrapper the receipt\n * endpoint returns is accepted as-is: `.receipt` is verified, and the\n * wrapper's `verification` — Haven's own self-check — is never read. Pure —\n * `recover` is injectable but defaults to\n * standard ECDSA recovery, so this runs anywhere (no Haven backend).\n */\nexport function verifyPaymentReceipt(\n  receipt: unknown,\n  recover: RecoverFn = defaultRecover,\n): ReceiptVerification {\n  // #3418 rule 1: a list row (or any non-bundle) has no authorization object\n  // holding string delegate/signHash — answer, never throw.\n  if (typeof receipt !== 'object' || receipt === null) return NOT_A_SIGNED_RECEIPT\n  let source = receipt as {\n    authorization?: unknown\n    receipt?: unknown\n    onChain?: { chainId?: unknown }\n  }\n  // #3723: accept the endpoint's response as-is. When the top level carries no\n  // `authorization` and `.receipt` is a non-null object, verify the bundle\n  // inside the `{ receipt, verification }` wrapper (GET\n  // /payments/{id}/receipt, and HavenClient.getReceipt's re-wrap). ONE level\n  // only — no recursion — and the wrapper's `verification` is NEVER read: it\n  // is Haven's own self-check, and trusting it would defeat an offline\n  // verifier. A list row wrapped or bare still answers not_a_signed_receipt.\n  if (typeof source.authorization !== 'object' || source.authorization === null) {\n    if (typeof source.receipt !== 'object' || source.receipt === null) {\n      return NOT_A_SIGNED_RECEIPT\n    }\n    source = source.receipt as typeof source\n  }\n  if (typeof source.authorization !== 'object' || source.authorization === null) {\n    return NOT_A_SIGNED_RECEIPT\n  }\n  const auth = source.authorization as {\n    delegate?: unknown\n    signHash?: unknown\n    signature?: unknown\n    signatureScheme?: unknown\n  }\n  const { delegate, signHash, signature, signatureScheme } = auth\n  if (typeof delegate !== 'string' || delegate === '' || typeof signHash !== 'string' || signHash === '') {\n    return NOT_A_SIGNED_RECEIPT\n  }\n  if (typeof signature !== 'string' || signature === '') {\n    return { verified: false, reason: 'missing_signature' }\n  }\n\n  const chainId =\n    typeof source.onChain?.chainId === 'number' ? source.onChain.chainId : undefined\n  const digestVerifiable = chainId !== undefined && DELEGATION_MANAGER_CHAIN_IDS.has(chainId)\n\n  // #3418 rule 4: a userop digest needs the full UserOperation, which the\n  // bundle does not carry. Return not_verifiable_offline — never\n  // signer_mismatch, which would accuse a genuine payment.\n  if (signatureScheme === 'eip712_userop') {\n    return { verified: false, reason: 'not_verifiable_offline' }\n  }\n\n  // #3418 rule 3: rebuild the delegation digest from the pinned manager and\n  // the bundle's chain id, then recover over it.\n  if (signatureScheme === 'eip712_delegation') {\n    if (!digestVerifiable) {\n      return { verified: false, reason: 'not_verifiable_offline' }\n    }\n    let digest: string\n    try {\n      digest = delegationDigest(signHash, chainId as number)\n    } catch {\n      return { verified: false, reason: 'bad_signature' }\n    }\n    return finish(match(delegate, digest, signature, recover), 'delegation_digest')\n  }\n\n  // #3418 rule 5: absent or unknown scheme — retired-rail history (signed raw\n  // over signHash) or a backend older than this change. Raw recovery first,\n  // then the delegation digest when the chain allows rebuilding it. This is\n  // the one remaining ambiguous case, limited to old bundles.\n  const raw = match(delegate, signHash, signature, recover)\n  if (raw.ok) return finish(raw, 'sign_hash')\n  if (digestVerifiable) {\n    let digest: string\n    try {\n      digest = delegationDigest(signHash, chainId as number)\n    } catch {\n      return finish(raw, 'sign_hash')\n    }\n    const delegated = match(delegate, digest, signature, recover)\n    if (delegated.ok) return finish(delegated, 'delegation_digest')\n  }\n  return finish(raw, 'sign_hash')\n}\n"]}

package/dist/edge.cjs

@@ -1,7 +1,7 @@
 'use strict';
 
-var chunkIKQIIMM6_cjs = require('./chunk-IKQIIMM6.cjs');
-var chunkMZKLAHBK_cjs = require('./chunk-MZKLAHBK.cjs');
+var chunk4Z7PKLFD_cjs = require('./chunk-4Z7PKLFD.cjs');
+var chunkLZHCIK7L_cjs = require('./chunk-LZHCIK7L.cjs');
 
 // src/sub-budget-guards.ts
 var ERC20_PERIOD_TRANSFER_ENFORCER = "0x474e3Ae7E169e940607cC624Da8A15Eb120139aB";
@@ -31,10 +31,10 @@ function findCaveat(caveats, enforcer) {
   return caveats.find((c) => same(c.enforcer, enforcer));
 }
 function hashSubBudgetDelegation(delegation) {
-  return chunkIKQIIMM6_cjs.hashDelegation(delegation);
+  return chunk4Z7PKLFD_cjs.hashDelegation(delegation);
 }
 function refuseSubBudgetChild(what, detail) {
-  throw new chunkIKQIIMM6_cjs.HavenTypedDataRefusedError(
+  throw new chunk4Z7PKLFD_cjs.HavenTypedDataRefusedError(
     `Refusing to sign the sub-budget child: ${what}. ${detail} This signature opens a slice of the delegating agent budget for another agent, so it is verified locally against the expectation Haven declared, rather than trusted.`
   );
 }
@@ -43,10 +43,10 @@ function assertOwnSubBudgetChild(typedData, expected, delegateAddress, now = Dat
   if (td?.primaryType !== "Delegation") {
     refuseSubBudgetChild("it is not a Delegation payload", `primaryType was '${String(td?.primaryType)}'.`);
   }
-  if (!same(td.domain?.verifyingContract, chunkMZKLAHBK_cjs.DELEGATION_MANAGER)) {
+  if (!same(td.domain?.verifyingContract, chunkLZHCIK7L_cjs.DELEGATION_MANAGER)) {
     refuseSubBudgetChild(
       "the EIP-712 domain names an unknown DelegationManager",
-      `Expected ${chunkMZKLAHBK_cjs.DELEGATION_MANAGER}, got ${td.domain?.verifyingContract}.`
+      `Expected ${chunkLZHCIK7L_cjs.DELEGATION_MANAGER}, got ${td.domain?.verifyingContract}.`
     );
   }
   if (td.domain?.name !== DELEGATION_DOMAIN_NAME || td.domain?.version !== DELEGATION_DOMAIN_VERSION) {
@@ -62,10 +62,10 @@ function assertOwnSubBudgetChild(typedData, expected, delegateAddress, now = Dat
     );
   }
   const domainChain = Number(td.domain?.chainId);
-  if (!Number.isFinite(domainChain) || !chunkIKQIIMM6_cjs.DIRECT_PAYMENT_CHAIN_IDS.has(domainChain)) {
+  if (!Number.isFinite(domainChain) || !chunk4Z7PKLFD_cjs.DIRECT_PAYMENT_CHAIN_IDS.has(domainChain)) {
     refuseSubBudgetChild(
       "it is scoped to a chain the delegation rail has no pinned contracts for",
-      `Chains with pinned contracts: ${[...chunkIKQIIMM6_cjs.DIRECT_PAYMENT_CHAIN_IDS].join(", ")}; the child says ${String(td.domain?.chainId)}.`
+      `Chains with pinned contracts: ${[...chunk4Z7PKLFD_cjs.DIRECT_PAYMENT_CHAIN_IDS].join(", ")}; the child says ${String(td.domain?.chainId)}.`
     );
   }
   if (domainChain !== expected.chainId) {
@@ -74,7 +74,7 @@ function assertOwnSubBudgetChild(typedData, expected, delegateAddress, now = Dat
       `Expected chain ${expected.chainId}; the child says ${td.domain?.chainId}.`
     );
   }
-  const ownAccount = chunkMZKLAHBK_cjs.deriveDelegateAccountAddress(delegateAddress);
+  const ownAccount = chunkLZHCIK7L_cjs.deriveDelegateAccountAddress(delegateAddress);
   const delegator = td.message?.delegator;
   if (typeof delegator !== "string" || !same(delegator, ownAccount)) {
     refuseSubBudgetChild(
@@ -99,7 +99,7 @@ function assertOwnSubBudgetChild(typedData, expected, delegateAddress, now = Dat
   if (typeof authority !== "string" || !/^0x[0-9a-fA-F]{64}$/.test(authority)) {
     refuseSubBudgetChild("its authority is not a 32-byte delegation hash", `Got ${String(authority)}.`);
   }
-  if (authority.toLowerCase() === chunkMZKLAHBK_cjs.ROOT_AUTHORITY) {
+  if (authority.toLowerCase() === chunkLZHCIK7L_cjs.ROOT_AUTHORITY) {
     refuseSubBudgetChild(
       "it is a ROOT delegation, not a re-delegation of the delegating agent budget",
       "A sub-budget always chains under the delegating agent budget delegation."
@@ -112,7 +112,7 @@ function assertOwnSubBudgetChild(typedData, expected, delegateAddress, now = Dat
     );
   }
   const caveats = td.message?.caveats ?? [];
-  if (findCaveat(caveats, chunkMZKLAHBK_cjs.CAVEAT_ENFORCERS.erc20TransferAmount)) {
+  if (findCaveat(caveats, chunkLZHCIK7L_cjs.CAVEAT_ENFORCERS.erc20TransferAmount)) {
     refuseSubBudgetChild(
       "it carries a hard-cap transfer-amount caveat (the task-budget shape)",
       "A sub-budget is period-scoped: its amount caveat must be an ERC20PeriodTransferEnforcer caveat slicing the parent period meter, never a lifetime cap."
@@ -150,7 +150,7 @@ function assertOwnSubBudgetChild(typedData, expected, delegateAddress, now = Dat
       `Expected ${expected.startDate}; the child says ${startDate}.`
     );
   }
-  const timestamp = findCaveat(caveats, chunkMZKLAHBK_cjs.CAVEAT_ENFORCERS.timestamp);
+  const timestamp = findCaveat(caveats, chunkLZHCIK7L_cjs.CAVEAT_ENFORCERS.timestamp);
   if (!timestamp) {
     refuseSubBudgetChild("it never expires", "A sub-budget child without a timestamp caveat is open-ended.");
   }
@@ -165,7 +165,7 @@ function assertOwnSubBudgetChild(typedData, expected, delegateAddress, now = Dat
       `Expected ${expected.expiresAt}; the child says ${beforeThreshold}.`
     );
   }
-  const calldata = findCaveat(caveats, chunkMZKLAHBK_cjs.CAVEAT_ENFORCERS.allowedCalldata);
+  const calldata = findCaveat(caveats, chunkLZHCIK7L_cjs.CAVEAT_ENFORCERS.allowedCalldata);
   if (expected.recipientAddress) {
     if (!calldata) {
       refuseSubBudgetChild(
@@ -199,324 +199,324 @@ function assertOwnSubBudgetChild(typedData, expected, delegateAddress, now = Dat
   }
 }
 function assertOwnSubBudgetCloseUserOp(typedData, expected, delegateAddress) {
-  chunkIKQIIMM6_cjs.assertOwnTaskBudgetCloseUserOp(typedData, expected, delegateAddress);
+  chunk4Z7PKLFD_cjs.assertOwnTaskBudgetCloseUserOp(typedData, expected, delegateAddress);
 }
 
 Object.defineProperty(exports, "CAVEAT_TYPEHASH", {
   enumerable: true,
-  get: function () { return chunkIKQIIMM6_cjs.CAVEAT_TYPEHASH; }
+  get: function () { return chunk4Z7PKLFD_cjs.CAVEAT_TYPEHASH; }
 });
 Object.defineProperty(exports, "DELEGATION_TYPEHASH", {
   enumerable: true,
-  get: function () { return chunkIKQIIMM6_cjs.DELEGATION_TYPEHASH; }
+  get: function () { return chunk4Z7PKLFD_cjs.DELEGATION_TYPEHASH; }
 });
 Object.defineProperty(exports, "DIRECT_PAYMENT_CHAIN_IDS", {
   enumerable: true,
-  get: function () { return chunkIKQIIMM6_cjs.DIRECT_PAYMENT_CHAIN_IDS; }
+  get: function () { return chunk4Z7PKLFD_cjs.DIRECT_PAYMENT_CHAIN_IDS; }
 });
 Object.defineProperty(exports, "EXECUTE_ABI", {
   enumerable: true,
-  get: function () { return chunkIKQIIMM6_cjs.EXECUTE_ABI; }
+  get: function () { return chunk4Z7PKLFD_cjs.EXECUTE_ABI; }
 });
 Object.defineProperty(exports, "HAVEN_CLIENT_HEADER", {
   enumerable: true,
-  get: function () { return chunkIKQIIMM6_cjs.HAVEN_CLIENT_HEADER; }
+  get: function () { return chunk4Z7PKLFD_cjs.HAVEN_CLIENT_HEADER; }
 });
 Object.defineProperty(exports, "HAVEN_MINIMUM_NODE_VERSION", {
   enumerable: true,
-  get: function () { return chunkIKQIIMM6_cjs.HAVEN_MINIMUM_NODE_VERSION; }
+  get: function () { return chunk4Z7PKLFD_cjs.HAVEN_MINIMUM_NODE_VERSION; }
 });
 Object.defineProperty(exports, "HavenTypedDataRefusedError", {
   enumerable: true,
-  get: function () { return chunkIKQIIMM6_cjs.HavenTypedDataRefusedError; }
+  get: function () { return chunk4Z7PKLFD_cjs.HavenTypedDataRefusedError; }
 });
 Object.defineProperty(exports, "MAX_TASK_BUDGET_TTL_SECONDS", {
   enumerable: true,
-  get: function () { return chunkIKQIIMM6_cjs.MAX_TASK_BUDGET_TTL_SECONDS; }
+  get: function () { return chunk4Z7PKLFD_cjs.MAX_TASK_BUDGET_TTL_SECONDS; }
 });
 Object.defineProperty(exports, "TAX_DECLARATION_DOMAIN", {
   enumerable: true,
-  get: function () { return chunkIKQIIMM6_cjs.TAX_DECLARATION_DOMAIN; }
+  get: function () { return chunk4Z7PKLFD_cjs.TAX_DECLARATION_DOMAIN; }
 });
 Object.defineProperty(exports, "TAX_DECLARATION_PRIMARY_TYPE", {
   enumerable: true,
-  get: function () { return chunkIKQIIMM6_cjs.TAX_DECLARATION_PRIMARY_TYPE; }
+  get: function () { return chunk4Z7PKLFD_cjs.TAX_DECLARATION_PRIMARY_TYPE; }
 });
 Object.defineProperty(exports, "TAX_DECLARATION_TYPES", {
   enumerable: true,
-  get: function () { return chunkIKQIIMM6_cjs.TAX_DECLARATION_TYPES; }
+  get: function () { return chunk4Z7PKLFD_cjs.TAX_DECLARATION_TYPES; }
 });
 Object.defineProperty(exports, "TYPED_DATA_NOT_ALLOWED", {
   enumerable: true,
-  get: function () { return chunkIKQIIMM6_cjs.TYPED_DATA_NOT_ALLOWED; }
+  get: function () { return chunk4Z7PKLFD_cjs.TYPED_DATA_NOT_ALLOWED; }
 });
 Object.defineProperty(exports, "TaxDeclarationRefusedError", {
   enumerable: true,
-  get: function () { return chunkIKQIIMM6_cjs.TaxDeclarationRefusedError; }
+  get: function () { return chunk4Z7PKLFD_cjs.TaxDeclarationRefusedError; }
 });
 Object.defineProperty(exports, "X402_PAYMENT_NONCE_TAG", {
   enumerable: true,
-  get: function () { return chunkIKQIIMM6_cjs.X402_PAYMENT_NONCE_TAG; }
+  get: function () { return chunk4Z7PKLFD_cjs.X402_PAYMENT_NONCE_TAG; }
 });
 Object.defineProperty(exports, "X_TAX_DECLARATION_HEADER", {
   enumerable: true,
-  get: function () { return chunkIKQIIMM6_cjs.X_TAX_DECLARATION_HEADER; }
+  get: function () { return chunk4Z7PKLFD_cjs.X_TAX_DECLARATION_HEADER; }
 });
 Object.defineProperty(exports, "addressFromKey", {
   enumerable: true,
-  get: function () { return chunkIKQIIMM6_cjs.addressFromKey; }
+  get: function () { return chunk4Z7PKLFD_cjs.addressFromKey; }
 });
 Object.defineProperty(exports, "assertBoundDirectPaymentUserOp", {
   enumerable: true,
-  get: function () { return chunkIKQIIMM6_cjs.assertBoundDirectPaymentUserOp; }
+  get: function () { return chunk4Z7PKLFD_cjs.assertBoundDirectPaymentUserOp; }
 });
 Object.defineProperty(exports, "assertFundingLegPaysDelegate", {
   enumerable: true,
-  get: function () { return chunkIKQIIMM6_cjs.assertFundingLegPaysDelegate; }
+  get: function () { return chunk4Z7PKLFD_cjs.assertFundingLegPaysDelegate; }
 });
 Object.defineProperty(exports, "assertOwnSettlementChild", {
   enumerable: true,
-  get: function () { return chunkIKQIIMM6_cjs.assertOwnSettlementChild; }
+  get: function () { return chunk4Z7PKLFD_cjs.assertOwnSettlementChild; }
 });
 Object.defineProperty(exports, "assertOwnTaskBudgetCloseUserOp", {
   enumerable: true,
-  get: function () { return chunkIKQIIMM6_cjs.assertOwnTaskBudgetCloseUserOp; }
+  get: function () { return chunk4Z7PKLFD_cjs.assertOwnTaskBudgetCloseUserOp; }
 });
 Object.defineProperty(exports, "assertOwnTaskChild", {
   enumerable: true,
-  get: function () { return chunkIKQIIMM6_cjs.assertOwnTaskChild; }
+  get: function () { return chunk4Z7PKLFD_cjs.assertOwnTaskChild; }
 });
 Object.defineProperty(exports, "buildSignedTaxDeclaration", {
   enumerable: true,
-  get: function () { return chunkIKQIIMM6_cjs.buildSignedTaxDeclaration; }
+  get: function () { return chunk4Z7PKLFD_cjs.buildSignedTaxDeclaration; }
 });
 Object.defineProperty(exports, "buildSweepAuthorizationMessage", {
   enumerable: true,
-  get: function () { return chunkIKQIIMM6_cjs.buildSweepAuthorizationMessage; }
+  get: function () { return chunk4Z7PKLFD_cjs.buildSweepAuthorizationMessage; }
 });
 Object.defineProperty(exports, "buildSweepTypedData", {
   enumerable: true,
-  get: function () { return chunkIKQIIMM6_cjs.buildSweepTypedData; }
+  get: function () { return chunk4Z7PKLFD_cjs.buildSweepTypedData; }
 });
 Object.defineProperty(exports, "buildX402ExpectedMessage", {
   enumerable: true,
-  get: function () { return chunkIKQIIMM6_cjs.buildX402ExpectedMessage; }
+  get: function () { return chunk4Z7PKLFD_cjs.buildX402ExpectedMessage; }
 });
 Object.defineProperty(exports, "createNextStepBuilder", {
   enumerable: true,
-  get: function () { return chunkIKQIIMM6_cjs.createNextStepBuilder; }
+  get: function () { return chunk4Z7PKLFD_cjs.createNextStepBuilder; }
 });
 Object.defineProperty(exports, "decodeBase64Json", {
   enumerable: true,
-  get: function () { return chunkIKQIIMM6_cjs.decodeBase64Json; }
+  get: function () { return chunk4Z7PKLFD_cjs.decodeBase64Json; }
 });
 Object.defineProperty(exports, "deriveX402PaymentNonce", {
   enumerable: true,
-  get: function () { return chunkIKQIIMM6_cjs.deriveX402PaymentNonce; }
+  get: function () { return chunk4Z7PKLFD_cjs.deriveX402PaymentNonce; }
 });
 Object.defineProperty(exports, "encodeBase64Json", {
   enumerable: true,
-  get: function () { return chunkIKQIIMM6_cjs.encodeBase64Json; }
+  get: function () { return chunk4Z7PKLFD_cjs.encodeBase64Json; }
 });
 Object.defineProperty(exports, "encodeTaxDeclarationHeader", {
   enumerable: true,
-  get: function () { return chunkIKQIIMM6_cjs.encodeTaxDeclarationHeader; }
+  get: function () { return chunk4Z7PKLFD_cjs.encodeTaxDeclarationHeader; }
 });
 Object.defineProperty(exports, "hashDelegation", {
   enumerable: true,
-  get: function () { return chunkIKQIIMM6_cjs.hashDelegation; }
+  get: function () { return chunk4Z7PKLFD_cjs.hashDelegation; }
 });
 Object.defineProperty(exports, "havenClientIdentity", {
   enumerable: true,
-  get: function () { return chunkIKQIIMM6_cjs.havenClientIdentity; }
+  get: function () { return chunk4Z7PKLFD_cjs.havenClientIdentity; }
 });
 Object.defineProperty(exports, "isSupportedNodeVersion", {
   enumerable: true,
-  get: function () { return chunkIKQIIMM6_cjs.isSupportedNodeVersion; }
+  get: function () { return chunk4Z7PKLFD_cjs.isSupportedNodeVersion; }
 });
 Object.defineProperty(exports, "isTaskChildTypedData", {
   enumerable: true,
-  get: function () { return chunkIKQIIMM6_cjs.isTaskChildTypedData; }
+  get: function () { return chunk4Z7PKLFD_cjs.isTaskChildTypedData; }
 });
 Object.defineProperty(exports, "principalAttributionHash", {
   enumerable: true,
-  get: function () { return chunkIKQIIMM6_cjs.principalAttributionHash; }
+  get: function () { return chunk4Z7PKLFD_cjs.principalAttributionHash; }
 });
 Object.defineProperty(exports, "readClientUpdate", {
   enumerable: true,
-  get: function () { return chunkIKQIIMM6_cjs.readClientUpdate; }
+  get: function () { return chunk4Z7PKLFD_cjs.readClientUpdate; }
 });
 Object.defineProperty(exports, "selectStandardPaymentOption", {
   enumerable: true,
-  get: function () { return chunkIKQIIMM6_cjs.selectStandardPaymentOption; }
+  get: function () { return chunk4Z7PKLFD_cjs.selectStandardPaymentOption; }
 });
 Object.defineProperty(exports, "signHash", {
   enumerable: true,
-  get: function () { return chunkIKQIIMM6_cjs.signHash; }
+  get: function () { return chunk4Z7PKLFD_cjs.signHash; }
 });
 Object.defineProperty(exports, "taxPrincipalId", {
   enumerable: true,
-  get: function () { return chunkIKQIIMM6_cjs.taxPrincipalId; }
+  get: function () { return chunk4Z7PKLFD_cjs.taxPrincipalId; }
 });
 Object.defineProperty(exports, "toStandardPaymentRequirements", {
   enumerable: true,
-  get: function () { return chunkIKQIIMM6_cjs.toStandardPaymentRequirements; }
+  get: function () { return chunk4Z7PKLFD_cjs.toStandardPaymentRequirements; }
 });
 Object.defineProperty(exports, "unsupportedNodeVersionMessage", {
   enumerable: true,
-  get: function () { return chunkIKQIIMM6_cjs.unsupportedNodeVersionMessage; }
+  get: function () { return chunk4Z7PKLFD_cjs.unsupportedNodeVersionMessage; }
 });
 Object.defineProperty(exports, "verifySignature", {
   enumerable: true,
-  get: function () { return chunkIKQIIMM6_cjs.verifySignature; }
+  get: function () { return chunk4Z7PKLFD_cjs.verifySignature; }
 });
 Object.defineProperty(exports, "verifyTaxDeclarationSignature", {
   enumerable: true,
-  get: function () { return chunkIKQIIMM6_cjs.verifyTaxDeclarationSignature; }
+  get: function () { return chunk4Z7PKLFD_cjs.verifyTaxDeclarationSignature; }
 });
 Object.defineProperty(exports, "x402AuthorizationAmount", {
   enumerable: true,
-  get: function () { return chunkIKQIIMM6_cjs.x402AuthorizationAmount; }
+  get: function () { return chunk4Z7PKLFD_cjs.x402AuthorizationAmount; }
 });
 Object.defineProperty(exports, "x402PaymentHeaderNamesFor", {
   enumerable: true,
-  get: function () { return chunkIKQIIMM6_cjs.x402PaymentHeaderNamesFor; }
+  get: function () { return chunk4Z7PKLFD_cjs.x402PaymentHeaderNamesFor; }
 });
 Object.defineProperty(exports, "x402RetryHeadersFor", {
   enumerable: true,
-  get: function () { return chunkIKQIIMM6_cjs.x402RetryHeadersFor; }
+  get: function () { return chunk4Z7PKLFD_cjs.x402RetryHeadersFor; }
 });
 Object.defineProperty(exports, "x402V2PaymentEnvelope", {
   enumerable: true,
-  get: function () { return chunkIKQIIMM6_cjs.x402V2PaymentEnvelope; }
+  get: function () { return chunk4Z7PKLFD_cjs.x402V2PaymentEnvelope; }
 });
 Object.defineProperty(exports, "AgentPaymentFailureCode", {
   enumerable: true,
-  get: function () { return chunkMZKLAHBK_cjs.AgentPaymentFailureCode; }
+  get: function () { return chunkLZHCIK7L_cjs.AgentPaymentFailureCode; }
 });
 Object.defineProperty(exports, "AgentPaymentNextAction", {
   enumerable: true,
-  get: function () { return chunkMZKLAHBK_cjs.AgentPaymentNextAction; }
+  get: function () { return chunkLZHCIK7L_cjs.AgentPaymentNextAction; }
 });
 Object.defineProperty(exports, "CAVEAT_ENFORCERS", {
   enumerable: true,
-  get: function () { return chunkMZKLAHBK_cjs.CAVEAT_ENFORCERS; }
+  get: function () { return chunkLZHCIK7L_cjs.CAVEAT_ENFORCERS; }
 });
 Object.defineProperty(exports, "DELEGATION_MANAGER", {
   enumerable: true,
-  get: function () { return chunkMZKLAHBK_cjs.DELEGATION_MANAGER; }
+  get: function () { return chunkLZHCIK7L_cjs.DELEGATION_MANAGER; }
 });
 Object.defineProperty(exports, "DELEGATION_TUPLE_COMPONENTS", {
   enumerable: true,
-  get: function () { return chunkMZKLAHBK_cjs.DELEGATION_TUPLE_COMPONENTS; }
+  get: function () { return chunkLZHCIK7L_cjs.DELEGATION_TUPLE_COMPONENTS; }
 });
 Object.defineProperty(exports, "DIRECT_SIGN_CONTEXT_VERSION", {
   enumerable: true,
-  get: function () { return chunkMZKLAHBK_cjs.DIRECT_SIGN_CONTEXT_VERSION; }
+  get: function () { return chunkLZHCIK7L_cjs.DIRECT_SIGN_CONTEXT_VERSION; }
 });
 Object.defineProperty(exports, "ENTRY_POINT_V07", {
   enumerable: true,
-  get: function () { return chunkMZKLAHBK_cjs.ENTRY_POINT_V07; }
+  get: function () { return chunkLZHCIK7L_cjs.ENTRY_POINT_V07; }
 });
 Object.defineProperty(exports, "HAVEN_CONNECTOR_CHANNEL", {
   enumerable: true,
-  get: function () { return chunkMZKLAHBK_cjs.HAVEN_CONNECTOR_CHANNEL; }
+  get: function () { return chunkLZHCIK7L_cjs.HAVEN_CONNECTOR_CHANNEL; }
 });
 Object.defineProperty(exports, "HYBRID_DELEGATOR_IMPLEMENTATION", {
   enumerable: true,
-  get: function () { return chunkMZKLAHBK_cjs.HYBRID_DELEGATOR_IMPLEMENTATION; }
+  get: function () { return chunkLZHCIK7L_cjs.HYBRID_DELEGATOR_IMPLEMENTATION; }
 });
 Object.defineProperty(exports, "HavenApiError", {
   enumerable: true,
-  get: function () { return chunkMZKLAHBK_cjs.HavenApiError; }
+  get: function () { return chunkLZHCIK7L_cjs.HavenApiError; }
 });
 Object.defineProperty(exports, "HavenError", {
   enumerable: true,
-  get: function () { return chunkMZKLAHBK_cjs.HavenError; }
+  get: function () { return chunkLZHCIK7L_cjs.HavenError; }
 });
 Object.defineProperty(exports, "HavenSigningError", {
   enumerable: true,
-  get: function () { return chunkMZKLAHBK_cjs.HavenSigningError; }
+  get: function () { return chunkLZHCIK7L_cjs.HavenSigningError; }
 });
 Object.defineProperty(exports, "HavenUnsupportedSignerVersionError", {
   enumerable: true,
-  get: function () { return chunkMZKLAHBK_cjs.HavenUnsupportedSignerVersionError; }
+  get: function () { return chunkLZHCIK7L_cjs.HavenUnsupportedSignerVersionError; }
 });
 Object.defineProperty(exports, "HavenUserOpBindingError", {
   enumerable: true,
-  get: function () { return chunkMZKLAHBK_cjs.HavenUserOpBindingError; }
+  get: function () { return chunkLZHCIK7L_cjs.HavenUserOpBindingError; }
 });
 Object.defineProperty(exports, "MAX_SETTLEMENT_WINDOW_SECONDS", {
   enumerable: true,
-  get: function () { return chunkMZKLAHBK_cjs.MAX_SETTLEMENT_WINDOW_SECONDS; }
+  get: function () { return chunkLZHCIK7L_cjs.MAX_SETTLEMENT_WINDOW_SECONDS; }
 });
 Object.defineProperty(exports, "REDEEM_DELEGATIONS_ABI", {
   enumerable: true,
-  get: function () { return chunkMZKLAHBK_cjs.REDEEM_DELEGATIONS_ABI; }
+  get: function () { return chunkLZHCIK7L_cjs.REDEEM_DELEGATIONS_ABI; }
 });
 Object.defineProperty(exports, "ROOT_AUTHORITY", {
   enumerable: true,
-  get: function () { return chunkMZKLAHBK_cjs.ROOT_AUTHORITY; }
+  get: function () { return chunkLZHCIK7L_cjs.ROOT_AUTHORITY; }
 });
 Object.defineProperty(exports, "SIGNER_UPDATE_FALLBACK", {
   enumerable: true,
-  get: function () { return chunkMZKLAHBK_cjs.SIGNER_UPDATE_FALLBACK; }
+  get: function () { return chunkLZHCIK7L_cjs.SIGNER_UPDATE_FALLBACK; }
 });
 Object.defineProperty(exports, "SIMPLE_FACTORY_ADDRESS", {
   enumerable: true,
-  get: function () { return chunkMZKLAHBK_cjs.SIMPLE_FACTORY_ADDRESS; }
+  get: function () { return chunkLZHCIK7L_cjs.SIMPLE_FACTORY_ADDRESS; }
 });
 Object.defineProperty(exports, "SINGLE_DEFAULT_MODE", {
   enumerable: true,
-  get: function () { return chunkMZKLAHBK_cjs.SINGLE_DEFAULT_MODE; }
+  get: function () { return chunkLZHCIK7L_cjs.SINGLE_DEFAULT_MODE; }
 });
 Object.defineProperty(exports, "SignerRefusalCode", {
   enumerable: true,
-  get: function () { return chunkMZKLAHBK_cjs.SignerRefusalCode; }
+  get: function () { return chunkLZHCIK7L_cjs.SignerRefusalCode; }
 });
 Object.defineProperty(exports, "TASK_SIGN_CONTEXT_VERSION", {
   enumerable: true,
-  get: function () { return chunkMZKLAHBK_cjs.TASK_SIGN_CONTEXT_VERSION; }
+  get: function () { return chunkLZHCIK7L_cjs.TASK_SIGN_CONTEXT_VERSION; }
 });
 Object.defineProperty(exports, "assertRedeemsOwnBudgetDelegation", {
   enumerable: true,
-  get: function () { return chunkMZKLAHBK_cjs.assertRedeemsOwnBudgetDelegation; }
+  get: function () { return chunkLZHCIK7L_cjs.assertRedeemsOwnBudgetDelegation; }
 });
 Object.defineProperty(exports, "assertUserOpTypedDataBinding", {
   enumerable: true,
-  get: function () { return chunkMZKLAHBK_cjs.assertUserOpTypedDataBinding; }
+  get: function () { return chunkLZHCIK7L_cjs.assertUserOpTypedDataBinding; }
 });
 Object.defineProperty(exports, "chainIdForNetwork", {
   enumerable: true,
-  get: function () { return chunkMZKLAHBK_cjs.chainIdForNetwork; }
+  get: function () { return chunkLZHCIK7L_cjs.chainIdForNetwork; }
 });
 Object.defineProperty(exports, "connectorRerunCommand", {
   enumerable: true,
-  get: function () { return chunkMZKLAHBK_cjs.connectorRerunCommand; }
+  get: function () { return chunkLZHCIK7L_cjs.connectorRerunCommand; }
 });
 Object.defineProperty(exports, "connectorUpgradeCommand", {
   enumerable: true,
-  get: function () { return chunkMZKLAHBK_cjs.connectorUpgradeCommand; }
+  get: function () { return chunkLZHCIK7L_cjs.connectorUpgradeCommand; }
 });
 Object.defineProperty(exports, "deriveDelegateAccountAddress", {
   enumerable: true,
-  get: function () { return chunkMZKLAHBK_cjs.deriveDelegateAccountAddress; }
+  get: function () { return chunkLZHCIK7L_cjs.deriveDelegateAccountAddress; }
 });
 Object.defineProperty(exports, "isPackedUserOperationTypedData", {
   enumerable: true,
-  get: function () { return chunkMZKLAHBK_cjs.isPackedUserOperationTypedData; }
+  get: function () { return chunkLZHCIK7L_cjs.isPackedUserOperationTypedData; }
 });
 Object.defineProperty(exports, "isSettlementChildTypedData", {
   enumerable: true,
-  get: function () { return chunkMZKLAHBK_cjs.isSettlementChildTypedData; }
+  get: function () { return chunkLZHCIK7L_cjs.isSettlementChildTypedData; }
 });
 Object.defineProperty(exports, "packedUserOperationHash", {
   enumerable: true,
-  get: function () { return chunkMZKLAHBK_cjs.packedUserOperationHash; }
+  get: function () { return chunkLZHCIK7L_cjs.packedUserOperationHash; }
 });
 Object.defineProperty(exports, "verifySettlementChild", {
   enumerable: true,
-  get: function () { return chunkMZKLAHBK_cjs.verifySettlementChild; }
+  get: function () { return chunkLZHCIK7L_cjs.verifySettlementChild; }
 });
 exports.ERC20_PERIOD_TRANSFER_ENFORCER = ERC20_PERIOD_TRANSFER_ENFORCER;
 exports.assertOwnSubBudgetChild = assertOwnSubBudgetChild;

package/dist/edge.d.cts

@@ -1,7 +1,7 @@
-import { an as HavenSigningError } from './types-DKmvjXK6.cjs';
-export { V as AgentPaymentFailureCode, Z as AgentPaymentNextAction, aj as HavenApiError, I as HavenError, ap as HavenUnsupportedSignerVersionError, aE as SIGNER_UPDATE_FALLBACK, aF as SignerRefusalCode, aK as X402ExpectedAuth, aM as X402PaymentOption, X as X402PaymentRequired } from './types-DKmvjXK6.cjs';
-import { aW as DelegationForHashing } from './base64-DR4Gl8cD.cjs';
-export { aX as CAVEAT_ENFORCERS, aY as CAVEAT_TYPEHASH, aZ as DELEGATION_MANAGER, a_ as DELEGATION_TYPEHASH, a$ as DIRECT_PAYMENT_CHAIN_IDS, c as DIRECT_SIGN_CONTEXT_VERSION, E as ENTRY_POINT_V07, b0 as EXECUTE_ABI, e as HAVEN_CLIENT_HEADER, f as HAVEN_CONNECTOR_CHANNEL, g as HAVEN_MINIMUM_NODE_VERSION, b1 as HYBRID_DELEGATOR_IMPLEMENTATION, H as HavenClientUpdate, j as HavenTypedDataRefusedError, k as HavenUserOpBindingError, b2 as MAX_SETTLEMENT_WINDOW_SECONDS, M as MAX_TASK_BUDGET_TTL_SECONDS, m as NextStep, o as NextStepHandoff, q as NextStepTarget, R as ROOT_AUTHORITY, b3 as SIMPLE_FACTORY_ADDRESS, z as SettlementChildExpectation, b4 as SettlementChildTypedData, a as SweepAuthorization, B as SweepExpectedAuth, T as TASK_SIGN_CONTEXT_VERSION, K as TYPED_DATA_NOT_ALLOWED, L as TaskBudgetCloseExpectation, O as TaskChildExpectation, Q as TaskChildTypedData, a0 as X402_PAYMENT_NONCE_TAG, a4 as assertBoundDirectPaymentUserOp, b5 as assertFundingLegPaysDelegate, b6 as assertOwnSettlementChild, a5 as assertOwnTaskBudgetCloseUserOp, a6 as assertOwnTaskChild, a7 as assertUserOpTypedDataBinding, a8 as buildSweepAuthorizationMessage, a9 as buildSweepTypedData, aa as buildX402ExpectedMessage, b7 as chainIdForNetwork, ac as connectorRerunCommand, ae as connectorUpgradeCommand, af as createNextStepBuilder, ag as decodeBase64Json, aj as deriveDelegateAccountAddress, ak as deriveX402PaymentNonce, al as encodeBase64Json, ao as hashDelegation, ap as havenClientIdentity, as as isPackedUserOperationTypedData, b8 as isSettlementChildTypedData, at as isSupportedNodeVersion, av as isTaskChildTypedData, ax as packedUserOperationHash, aB as readClientUpdate, aI as selectStandardPaymentOption, aM as toStandardPaymentRequirements, aN as unsupportedNodeVersionMessage, aP as verifySettlementChild, aR as x402AuthorizationAmount, aT as x402PaymentHeaderNamesFor, aU as x402RetryHeadersFor, aV as x402V2PaymentEnvelope } from './base64-DR4Gl8cD.cjs';
+import { aq as HavenSigningError } from './types-3vUBmumz.cjs';
+export { V as AgentPaymentFailureCode, Z as AgentPaymentNextAction, al as HavenApiError, I as HavenError, as as HavenUnsupportedSignerVersionError, aH as SIGNER_UPDATE_FALLBACK, aI as SignerRefusalCode, aN as X402ExpectedAuth, aP as X402PaymentOption, X as X402PaymentRequired } from './types-3vUBmumz.cjs';
+import { aW as DelegationForHashing } from './base64-C3mJNLYR.cjs';
+export { aX as CAVEAT_ENFORCERS, aY as CAVEAT_TYPEHASH, aZ as DELEGATION_MANAGER, a_ as DELEGATION_TYPEHASH, a$ as DIRECT_PAYMENT_CHAIN_IDS, c as DIRECT_SIGN_CONTEXT_VERSION, E as ENTRY_POINT_V07, b0 as EXECUTE_ABI, e as HAVEN_CLIENT_HEADER, f as HAVEN_CONNECTOR_CHANNEL, g as HAVEN_MINIMUM_NODE_VERSION, b1 as HYBRID_DELEGATOR_IMPLEMENTATION, H as HavenClientUpdate, j as HavenTypedDataRefusedError, k as HavenUserOpBindingError, b2 as MAX_SETTLEMENT_WINDOW_SECONDS, M as MAX_TASK_BUDGET_TTL_SECONDS, m as NextStep, o as NextStepHandoff, q as NextStepTarget, R as ROOT_AUTHORITY, b3 as SIMPLE_FACTORY_ADDRESS, z as SettlementChildExpectation, b4 as SettlementChildTypedData, a as SweepAuthorization, B as SweepExpectedAuth, T as TASK_SIGN_CONTEXT_VERSION, K as TYPED_DATA_NOT_ALLOWED, L as TaskBudgetCloseExpectation, O as TaskChildExpectation, Q as TaskChildTypedData, a0 as X402_PAYMENT_NONCE_TAG, a4 as assertBoundDirectPaymentUserOp, b5 as assertFundingLegPaysDelegate, b6 as assertOwnSettlementChild, a5 as assertOwnTaskBudgetCloseUserOp, a6 as assertOwnTaskChild, a7 as assertUserOpTypedDataBinding, a8 as buildSweepAuthorizationMessage, a9 as buildSweepTypedData, aa as buildX402ExpectedMessage, b7 as chainIdForNetwork, ac as connectorRerunCommand, ae as connectorUpgradeCommand, af as createNextStepBuilder, ag as decodeBase64Json, aj as deriveDelegateAccountAddress, ak as deriveX402PaymentNonce, al as encodeBase64Json, ao as hashDelegation, ap as havenClientIdentity, as as isPackedUserOperationTypedData, b8 as isSettlementChildTypedData, at as isSupportedNodeVersion, av as isTaskChildTypedData, ax as packedUserOperationHash, aB as readClientUpdate, aI as selectStandardPaymentOption, aM as toStandardPaymentRequirements, aN as unsupportedNodeVersionMessage, aP as verifySettlementChild, aR as x402AuthorizationAmount, aT as x402PaymentHeaderNamesFor, aU as x402RetryHeadersFor, aV as x402V2PaymentEnvelope } from './base64-C3mJNLYR.cjs';
 import { Hex, Address } from 'viem';
 import 'x402/types';
 
@@ -298,10 +298,13 @@ declare const REDEEM_DELEGATIONS_ABI: readonly [{
 declare const SINGLE_DEFAULT_MODE: Hex;
 /**
  * Verify `redeemCalldata` (the bytes passed to `execute()`, selector already
- * confirmed to be `redeemDelegations` by the caller) is EXACTLY one of Haven's
- * two shapes: a single delegation redeemed by `ownAccount` and granted by
- * someone else, or (#3329) that grant behind one task-budget child `ownAccount`
- * delegated to itself; in `SingleDefault` mode, with no encoding slack
+ * confirmed to be `redeemDelegations` by the caller) is EXACTLY one of
+ * Haven's three shapes: a single delegation redeemed by `ownAccount` and
+ * granted by someone else; (#3329) that grant behind one task-budget child
+ * `ownAccount` delegated to itself — the two-link [task child, budget]
+ * chain; or (#3330) a sub-budget grant redeemed under its parent's
+ * self-narrowing — the three-link [sub grant, parent child, budget] chain.
+ * In `SingleDefault` mode, with no encoding slack
  * anywhere. Throws
  * `HavenSigningError` (never returns) on any disagreement.
  */

package/dist/edge.d.ts

@@ -1,7 +1,7 @@
-import { an as HavenSigningError } from './types-DKmvjXK6.js';
-export { V as AgentPaymentFailureCode, Z as AgentPaymentNextAction, aj as HavenApiError, I as HavenError, ap as HavenUnsupportedSignerVersionError, aE as SIGNER_UPDATE_FALLBACK, aF as SignerRefusalCode, aK as X402ExpectedAuth, aM as X402PaymentOption, X as X402PaymentRequired } from './types-DKmvjXK6.js';
-import { aW as DelegationForHashing } from './base64-D4VZhgUg.js';
-export { aX as CAVEAT_ENFORCERS, aY as CAVEAT_TYPEHASH, aZ as DELEGATION_MANAGER, a_ as DELEGATION_TYPEHASH, a$ as DIRECT_PAYMENT_CHAIN_IDS, c as DIRECT_SIGN_CONTEXT_VERSION, E as ENTRY_POINT_V07, b0 as EXECUTE_ABI, e as HAVEN_CLIENT_HEADER, f as HAVEN_CONNECTOR_CHANNEL, g as HAVEN_MINIMUM_NODE_VERSION, b1 as HYBRID_DELEGATOR_IMPLEMENTATION, H as HavenClientUpdate, j as HavenTypedDataRefusedError, k as HavenUserOpBindingError, b2 as MAX_SETTLEMENT_WINDOW_SECONDS, M as MAX_TASK_BUDGET_TTL_SECONDS, m as NextStep, o as NextStepHandoff, q as NextStepTarget, R as ROOT_AUTHORITY, b3 as SIMPLE_FACTORY_ADDRESS, z as SettlementChildExpectation, b4 as SettlementChildTypedData, a as SweepAuthorization, B as SweepExpectedAuth, T as TASK_SIGN_CONTEXT_VERSION, K as TYPED_DATA_NOT_ALLOWED, L as TaskBudgetCloseExpectation, O as TaskChildExpectation, Q as TaskChildTypedData, a0 as X402_PAYMENT_NONCE_TAG, a4 as assertBoundDirectPaymentUserOp, b5 as assertFundingLegPaysDelegate, b6 as assertOwnSettlementChild, a5 as assertOwnTaskBudgetCloseUserOp, a6 as assertOwnTaskChild, a7 as assertUserOpTypedDataBinding, a8 as buildSweepAuthorizationMessage, a9 as buildSweepTypedData, aa as buildX402ExpectedMessage, b7 as chainIdForNetwork, ac as connectorRerunCommand, ae as connectorUpgradeCommand, af as createNextStepBuilder, ag as decodeBase64Json, aj as deriveDelegateAccountAddress, ak as deriveX402PaymentNonce, al as encodeBase64Json, ao as hashDelegation, ap as havenClientIdentity, as as isPackedUserOperationTypedData, b8 as isSettlementChildTypedData, at as isSupportedNodeVersion, av as isTaskChildTypedData, ax as packedUserOperationHash, aB as readClientUpdate, aI as selectStandardPaymentOption, aM as toStandardPaymentRequirements, aN as unsupportedNodeVersionMessage, aP as verifySettlementChild, aR as x402AuthorizationAmount, aT as x402PaymentHeaderNamesFor, aU as x402RetryHeadersFor, aV as x402V2PaymentEnvelope } from './base64-D4VZhgUg.js';
+import { aq as HavenSigningError } from './types-3vUBmumz.js';
+export { V as AgentPaymentFailureCode, Z as AgentPaymentNextAction, al as HavenApiError, I as HavenError, as as HavenUnsupportedSignerVersionError, aH as SIGNER_UPDATE_FALLBACK, aI as SignerRefusalCode, aN as X402ExpectedAuth, aP as X402PaymentOption, X as X402PaymentRequired } from './types-3vUBmumz.js';
+import { aW as DelegationForHashing } from './base64-CxzIc3KH.js';
+export { aX as CAVEAT_ENFORCERS, aY as CAVEAT_TYPEHASH, aZ as DELEGATION_MANAGER, a_ as DELEGATION_TYPEHASH, a$ as DIRECT_PAYMENT_CHAIN_IDS, c as DIRECT_SIGN_CONTEXT_VERSION, E as ENTRY_POINT_V07, b0 as EXECUTE_ABI, e as HAVEN_CLIENT_HEADER, f as HAVEN_CONNECTOR_CHANNEL, g as HAVEN_MINIMUM_NODE_VERSION, b1 as HYBRID_DELEGATOR_IMPLEMENTATION, H as HavenClientUpdate, j as HavenTypedDataRefusedError, k as HavenUserOpBindingError, b2 as MAX_SETTLEMENT_WINDOW_SECONDS, M as MAX_TASK_BUDGET_TTL_SECONDS, m as NextStep, o as NextStepHandoff, q as NextStepTarget, R as ROOT_AUTHORITY, b3 as SIMPLE_FACTORY_ADDRESS, z as SettlementChildExpectation, b4 as SettlementChildTypedData, a as SweepAuthorization, B as SweepExpectedAuth, T as TASK_SIGN_CONTEXT_VERSION, K as TYPED_DATA_NOT_ALLOWED, L as TaskBudgetCloseExpectation, O as TaskChildExpectation, Q as TaskChildTypedData, a0 as X402_PAYMENT_NONCE_TAG, a4 as assertBoundDirectPaymentUserOp, b5 as assertFundingLegPaysDelegate, b6 as assertOwnSettlementChild, a5 as assertOwnTaskBudgetCloseUserOp, a6 as assertOwnTaskChild, a7 as assertUserOpTypedDataBinding, a8 as buildSweepAuthorizationMessage, a9 as buildSweepTypedData, aa as buildX402ExpectedMessage, b7 as chainIdForNetwork, ac as connectorRerunCommand, ae as connectorUpgradeCommand, af as createNextStepBuilder, ag as decodeBase64Json, aj as deriveDelegateAccountAddress, ak as deriveX402PaymentNonce, al as encodeBase64Json, ao as hashDelegation, ap as havenClientIdentity, as as isPackedUserOperationTypedData, b8 as isSettlementChildTypedData, at as isSupportedNodeVersion, av as isTaskChildTypedData, ax as packedUserOperationHash, aB as readClientUpdate, aI as selectStandardPaymentOption, aM as toStandardPaymentRequirements, aN as unsupportedNodeVersionMessage, aP as verifySettlementChild, aR as x402AuthorizationAmount, aT as x402PaymentHeaderNamesFor, aU as x402RetryHeadersFor, aV as x402V2PaymentEnvelope } from './base64-CxzIc3KH.js';
 import { Hex, Address } from 'viem';
 import 'x402/types';
 
@@ -298,10 +298,13 @@ declare const REDEEM_DELEGATIONS_ABI: readonly [{
 declare const SINGLE_DEFAULT_MODE: Hex;
 /**
  * Verify `redeemCalldata` (the bytes passed to `execute()`, selector already
- * confirmed to be `redeemDelegations` by the caller) is EXACTLY one of Haven's
- * two shapes: a single delegation redeemed by `ownAccount` and granted by
- * someone else, or (#3329) that grant behind one task-budget child `ownAccount`
- * delegated to itself; in `SingleDefault` mode, with no encoding slack
+ * confirmed to be `redeemDelegations` by the caller) is EXACTLY one of
+ * Haven's three shapes: a single delegation redeemed by `ownAccount` and
+ * granted by someone else; (#3329) that grant behind one task-budget child
+ * `ownAccount` delegated to itself — the two-link [task child, budget]
+ * chain; or (#3330) a sub-budget grant redeemed under its parent's
+ * self-narrowing — the three-link [sub grant, parent child, budget] chain.
+ * In `SingleDefault` mode, with no encoding slack
  * anywhere. Throws
  * `HavenSigningError` (never returns) on any disagreement.
  */