@haven_ai/sdk 0.5.0-alpha.1 → 0.6.0-alpha.0

package/dist/edge.cjs

@@ -1,7 +1,7 @@
 'use strict';
 
-var chunkQSSVOPWA_cjs = require('./chunk-QSSVOPWA.cjs');
-var chunkJKUIE45B_cjs = require('./chunk-JKUIE45B.cjs');
+var chunkCK4NLLMO_cjs = require('./chunk-CK4NLLMO.cjs');
+var chunkS42QSWJY_cjs = require('./chunk-S42QSWJY.cjs');
 var secp256k1 = require('@noble/curves/secp256k1');
 var accounts = require('viem/accounts');
 var viem = require('viem');
@@ -17,7 +17,7 @@ function addressFromKey(privateKey) {
   try {
     return accounts.privateKeyToAddress(`0x${hexBytes(privateKey, 32, "private key")}`);
   } catch (err) {
-    throw new chunkJKUIE45B_cjs.HavenSigningError(
+    throw new chunkS42QSWJY_cjs.HavenSigningError(
       `Invalid private key: ${err instanceof Error ? err.message : String(err)}`
     );
   }
@@ -31,7 +31,7 @@ function signHash(privateKey, hash) {
       yParity: recovery
     });
   } catch (err) {
-    throw new chunkJKUIE45B_cjs.HavenSigningError(
+    throw new chunkS42QSWJY_cjs.HavenSigningError(
       `Failed to sign hash: ${err instanceof Error ? err.message : String(err)}`
     );
   }
@@ -52,217 +52,245 @@ function verifySignature(hash, signature, expectedAddress) {
   }
 }
 
+Object.defineProperty(exports, "CAVEAT_TYPEHASH", {
+  enumerable: true,
+  get: function () { return chunkCK4NLLMO_cjs.CAVEAT_TYPEHASH; }
+});
+Object.defineProperty(exports, "DELEGATION_TYPEHASH", {
+  enumerable: true,
+  get: function () { return chunkCK4NLLMO_cjs.DELEGATION_TYPEHASH; }
+});
 Object.defineProperty(exports, "DIRECT_PAYMENT_CHAIN_IDS", {
   enumerable: true,
-  get: function () { return chunkQSSVOPWA_cjs.DIRECT_PAYMENT_CHAIN_IDS; }
+  get: function () { return chunkCK4NLLMO_cjs.DIRECT_PAYMENT_CHAIN_IDS; }
 });
 Object.defineProperty(exports, "EXECUTE_ABI", {
   enumerable: true,
-  get: function () { return chunkQSSVOPWA_cjs.EXECUTE_ABI; }
+  get: function () { return chunkCK4NLLMO_cjs.EXECUTE_ABI; }
 });
 Object.defineProperty(exports, "HAVEN_CLIENT_HEADER", {
   enumerable: true,
-  get: function () { return chunkQSSVOPWA_cjs.HAVEN_CLIENT_HEADER; }
+  get: function () { return chunkCK4NLLMO_cjs.HAVEN_CLIENT_HEADER; }
 });
 Object.defineProperty(exports, "HAVEN_MINIMUM_NODE_VERSION", {
   enumerable: true,
-  get: function () { return chunkQSSVOPWA_cjs.HAVEN_MINIMUM_NODE_VERSION; }
+  get: function () { return chunkCK4NLLMO_cjs.HAVEN_MINIMUM_NODE_VERSION; }
 });
 Object.defineProperty(exports, "HavenTypedDataRefusedError", {
   enumerable: true,
-  get: function () { return chunkQSSVOPWA_cjs.HavenTypedDataRefusedError; }
+  get: function () { return chunkCK4NLLMO_cjs.HavenTypedDataRefusedError; }
+});
+Object.defineProperty(exports, "MAX_TASK_BUDGET_TTL_SECONDS", {
+  enumerable: true,
+  get: function () { return chunkCK4NLLMO_cjs.MAX_TASK_BUDGET_TTL_SECONDS; }
 });
 Object.defineProperty(exports, "TYPED_DATA_NOT_ALLOWED", {
   enumerable: true,
-  get: function () { return chunkQSSVOPWA_cjs.TYPED_DATA_NOT_ALLOWED; }
+  get: function () { return chunkCK4NLLMO_cjs.TYPED_DATA_NOT_ALLOWED; }
 });
 Object.defineProperty(exports, "assertBoundDirectPaymentUserOp", {
   enumerable: true,
-  get: function () { return chunkQSSVOPWA_cjs.assertBoundDirectPaymentUserOp; }
+  get: function () { return chunkCK4NLLMO_cjs.assertBoundDirectPaymentUserOp; }
 });
 Object.defineProperty(exports, "assertFundingLegPaysDelegate", {
   enumerable: true,
-  get: function () { return chunkQSSVOPWA_cjs.assertFundingLegPaysDelegate; }
+  get: function () { return chunkCK4NLLMO_cjs.assertFundingLegPaysDelegate; }
 });
 Object.defineProperty(exports, "assertOwnSettlementChild", {
   enumerable: true,
-  get: function () { return chunkQSSVOPWA_cjs.assertOwnSettlementChild; }
+  get: function () { return chunkCK4NLLMO_cjs.assertOwnSettlementChild; }
+});
+Object.defineProperty(exports, "assertOwnTaskBudgetCloseUserOp", {
+  enumerable: true,
+  get: function () { return chunkCK4NLLMO_cjs.assertOwnTaskBudgetCloseUserOp; }
+});
+Object.defineProperty(exports, "assertOwnTaskChild", {
+  enumerable: true,
+  get: function () { return chunkCK4NLLMO_cjs.assertOwnTaskChild; }
 });
 Object.defineProperty(exports, "buildSweepAuthorizationMessage", {
   enumerable: true,
-  get: function () { return chunkQSSVOPWA_cjs.buildSweepAuthorizationMessage; }
+  get: function () { return chunkCK4NLLMO_cjs.buildSweepAuthorizationMessage; }
 });
 Object.defineProperty(exports, "buildSweepTypedData", {
   enumerable: true,
-  get: function () { return chunkQSSVOPWA_cjs.buildSweepTypedData; }
+  get: function () { return chunkCK4NLLMO_cjs.buildSweepTypedData; }
 });
 Object.defineProperty(exports, "buildX402ExpectedMessage", {
   enumerable: true,
-  get: function () { return chunkQSSVOPWA_cjs.buildX402ExpectedMessage; }
+  get: function () { return chunkCK4NLLMO_cjs.buildX402ExpectedMessage; }
 });
 Object.defineProperty(exports, "createNextStepBuilder", {
   enumerable: true,
-  get: function () { return chunkQSSVOPWA_cjs.createNextStepBuilder; }
+  get: function () { return chunkCK4NLLMO_cjs.createNextStepBuilder; }
 });
 Object.defineProperty(exports, "decodeBase64Json", {
   enumerable: true,
-  get: function () { return chunkQSSVOPWA_cjs.decodeBase64Json; }
+  get: function () { return chunkCK4NLLMO_cjs.decodeBase64Json; }
 });
 Object.defineProperty(exports, "encodeBase64Json", {
   enumerable: true,
-  get: function () { return chunkQSSVOPWA_cjs.encodeBase64Json; }
+  get: function () { return chunkCK4NLLMO_cjs.encodeBase64Json; }
+});
+Object.defineProperty(exports, "hashDelegation", {
+  enumerable: true,
+  get: function () { return chunkCK4NLLMO_cjs.hashDelegation; }
 });
 Object.defineProperty(exports, "havenClientIdentity", {
   enumerable: true,
-  get: function () { return chunkQSSVOPWA_cjs.havenClientIdentity; }
+  get: function () { return chunkCK4NLLMO_cjs.havenClientIdentity; }
 });
 Object.defineProperty(exports, "isSupportedNodeVersion", {
   enumerable: true,
-  get: function () { return chunkQSSVOPWA_cjs.isSupportedNodeVersion; }
+  get: function () { return chunkCK4NLLMO_cjs.isSupportedNodeVersion; }
+});
+Object.defineProperty(exports, "isTaskChildTypedData", {
+  enumerable: true,
+  get: function () { return chunkCK4NLLMO_cjs.isTaskChildTypedData; }
 });
 Object.defineProperty(exports, "readClientUpdate", {
   enumerable: true,
-  get: function () { return chunkQSSVOPWA_cjs.readClientUpdate; }
+  get: function () { return chunkCK4NLLMO_cjs.readClientUpdate; }
 });
 Object.defineProperty(exports, "selectStandardPaymentOption", {
   enumerable: true,
-  get: function () { return chunkQSSVOPWA_cjs.selectStandardPaymentOption; }
+  get: function () { return chunkCK4NLLMO_cjs.selectStandardPaymentOption; }
 });
 Object.defineProperty(exports, "toStandardPaymentRequirements", {
   enumerable: true,
-  get: function () { return chunkQSSVOPWA_cjs.toStandardPaymentRequirements; }
+  get: function () { return chunkCK4NLLMO_cjs.toStandardPaymentRequirements; }
 });
 Object.defineProperty(exports, "unsupportedNodeVersionMessage", {
   enumerable: true,
-  get: function () { return chunkQSSVOPWA_cjs.unsupportedNodeVersionMessage; }
+  get: function () { return chunkCK4NLLMO_cjs.unsupportedNodeVersionMessage; }
 });
 Object.defineProperty(exports, "x402AuthorizationAmount", {
   enumerable: true,
-  get: function () { return chunkQSSVOPWA_cjs.x402AuthorizationAmount; }
+  get: function () { return chunkCK4NLLMO_cjs.x402AuthorizationAmount; }
 });
 Object.defineProperty(exports, "x402V2PaymentEnvelope", {
   enumerable: true,
-  get: function () { return chunkQSSVOPWA_cjs.x402V2PaymentEnvelope; }
+  get: function () { return chunkCK4NLLMO_cjs.x402V2PaymentEnvelope; }
 });
 Object.defineProperty(exports, "AgentPaymentFailureCode", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.AgentPaymentFailureCode; }
+  get: function () { return chunkS42QSWJY_cjs.AgentPaymentFailureCode; }
 });
 Object.defineProperty(exports, "AgentPaymentNextAction", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.AgentPaymentNextAction; }
+  get: function () { return chunkS42QSWJY_cjs.AgentPaymentNextAction; }
 });
 Object.defineProperty(exports, "CAVEAT_ENFORCERS", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.CAVEAT_ENFORCERS; }
+  get: function () { return chunkS42QSWJY_cjs.CAVEAT_ENFORCERS; }
 });
 Object.defineProperty(exports, "DELEGATION_MANAGER", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.DELEGATION_MANAGER; }
+  get: function () { return chunkS42QSWJY_cjs.DELEGATION_MANAGER; }
 });
 Object.defineProperty(exports, "DELEGATION_TUPLE_COMPONENTS", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.DELEGATION_TUPLE_COMPONENTS; }
+  get: function () { return chunkS42QSWJY_cjs.DELEGATION_TUPLE_COMPONENTS; }
 });
 Object.defineProperty(exports, "DIRECT_SIGN_CONTEXT_VERSION", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.DIRECT_SIGN_CONTEXT_VERSION; }
+  get: function () { return chunkS42QSWJY_cjs.DIRECT_SIGN_CONTEXT_VERSION; }
 });
 Object.defineProperty(exports, "ENTRY_POINT_V07", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.ENTRY_POINT_V07; }
+  get: function () { return chunkS42QSWJY_cjs.ENTRY_POINT_V07; }
 });
 Object.defineProperty(exports, "HAVEN_CONNECTOR_CHANNEL", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.HAVEN_CONNECTOR_CHANNEL; }
+  get: function () { return chunkS42QSWJY_cjs.HAVEN_CONNECTOR_CHANNEL; }
 });
 Object.defineProperty(exports, "HYBRID_DELEGATOR_IMPLEMENTATION", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.HYBRID_DELEGATOR_IMPLEMENTATION; }
+  get: function () { return chunkS42QSWJY_cjs.HYBRID_DELEGATOR_IMPLEMENTATION; }
 });
 Object.defineProperty(exports, "HavenApiError", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.HavenApiError; }
+  get: function () { return chunkS42QSWJY_cjs.HavenApiError; }
 });
 Object.defineProperty(exports, "HavenError", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.HavenError; }
+  get: function () { return chunkS42QSWJY_cjs.HavenError; }
 });
 Object.defineProperty(exports, "HavenSigningError", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.HavenSigningError; }
+  get: function () { return chunkS42QSWJY_cjs.HavenSigningError; }
 });
 Object.defineProperty(exports, "HavenUnsupportedSignerVersionError", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.HavenUnsupportedSignerVersionError; }
+  get: function () { return chunkS42QSWJY_cjs.HavenUnsupportedSignerVersionError; }
 });
 Object.defineProperty(exports, "HavenUserOpBindingError", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.HavenUserOpBindingError; }
+  get: function () { return chunkS42QSWJY_cjs.HavenUserOpBindingError; }
 });
 Object.defineProperty(exports, "MAX_SETTLEMENT_WINDOW_SECONDS", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.MAX_SETTLEMENT_WINDOW_SECONDS; }
+  get: function () { return chunkS42QSWJY_cjs.MAX_SETTLEMENT_WINDOW_SECONDS; }
 });
 Object.defineProperty(exports, "REDEEM_DELEGATIONS_ABI", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.REDEEM_DELEGATIONS_ABI; }
+  get: function () { return chunkS42QSWJY_cjs.REDEEM_DELEGATIONS_ABI; }
 });
 Object.defineProperty(exports, "ROOT_AUTHORITY", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.ROOT_AUTHORITY; }
+  get: function () { return chunkS42QSWJY_cjs.ROOT_AUTHORITY; }
 });
 Object.defineProperty(exports, "SIGNER_UPDATE_FALLBACK", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.SIGNER_UPDATE_FALLBACK; }
+  get: function () { return chunkS42QSWJY_cjs.SIGNER_UPDATE_FALLBACK; }
 });
 Object.defineProperty(exports, "SIMPLE_FACTORY_ADDRESS", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.SIMPLE_FACTORY_ADDRESS; }
+  get: function () { return chunkS42QSWJY_cjs.SIMPLE_FACTORY_ADDRESS; }
 });
 Object.defineProperty(exports, "SINGLE_DEFAULT_MODE", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.SINGLE_DEFAULT_MODE; }
+  get: function () { return chunkS42QSWJY_cjs.SINGLE_DEFAULT_MODE; }
 });
 Object.defineProperty(exports, "SignerRefusalCode", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.SignerRefusalCode; }
+  get: function () { return chunkS42QSWJY_cjs.SignerRefusalCode; }
 });
 Object.defineProperty(exports, "assertRedeemsOwnBudgetDelegation", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.assertRedeemsOwnBudgetDelegation; }
+  get: function () { return chunkS42QSWJY_cjs.assertRedeemsOwnBudgetDelegation; }
 });
 Object.defineProperty(exports, "assertUserOpTypedDataBinding", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.assertUserOpTypedDataBinding; }
+  get: function () { return chunkS42QSWJY_cjs.assertUserOpTypedDataBinding; }
 });
 Object.defineProperty(exports, "chainIdForNetwork", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.chainIdForNetwork; }
+  get: function () { return chunkS42QSWJY_cjs.chainIdForNetwork; }
 });
 Object.defineProperty(exports, "connectorRerunCommand", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.connectorRerunCommand; }
+  get: function () { return chunkS42QSWJY_cjs.connectorRerunCommand; }
 });
 Object.defineProperty(exports, "deriveDelegateAccountAddress", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.deriveDelegateAccountAddress; }
+  get: function () { return chunkS42QSWJY_cjs.deriveDelegateAccountAddress; }
 });
 Object.defineProperty(exports, "isPackedUserOperationTypedData", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.isPackedUserOperationTypedData; }
+  get: function () { return chunkS42QSWJY_cjs.isPackedUserOperationTypedData; }
 });
 Object.defineProperty(exports, "isSettlementChildTypedData", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.isSettlementChildTypedData; }
+  get: function () { return chunkS42QSWJY_cjs.isSettlementChildTypedData; }
 });
 Object.defineProperty(exports, "packedUserOperationHash", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.packedUserOperationHash; }
+  get: function () { return chunkS42QSWJY_cjs.packedUserOperationHash; }
 });
 Object.defineProperty(exports, "verifySettlementChild", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.verifySettlementChild; }
+  get: function () { return chunkS42QSWJY_cjs.verifySettlementChild; }
 });
 exports.addressFromKey = addressFromKey;
 exports.signHash = signHash;

package/dist/edge.d.cts

@@ -1,4 +1,4 @@
-export { M as AgentPaymentFailureCode, Q as AgentPaymentNextAction, b_ as CAVEAT_ENFORCERS, b$ as DELEGATION_MANAGER, c0 as DIRECT_PAYMENT_CHAIN_IDS, a7 as DIRECT_SIGN_CONTEXT_VERSION, a8 as ENTRY_POINT_V07, c1 as EXECUTE_ABI, aa as HAVEN_CLIENT_HEADER, ab as HAVEN_CONNECTOR_CHANNEL, ac as HAVEN_MINIMUM_NODE_VERSION, c2 as HYBRID_DELEGATOR_IMPLEMENTATION, ai as HavenApiError, a as HavenClientUpdate, E as HavenError, am as HavenSigningError, ao as HavenTypedDataRefusedError, ap as HavenUnsupportedSignerVersionError, aq as HavenUserOpBindingError, c3 as MAX_SETTLEMENT_WINDOW_SECONDS, aw as NextStep, ay as NextStepHandoff, aA as NextStepTarget, aI as ROOT_AUTHORITY, aL as SIGNER_UPDATE_FALLBACK, c4 as SIMPLE_FACTORY_ADDRESS, aQ as SettlementChildExpectation, c5 as SettlementChildTypedData, aR as SignerRefusalCode, j as SweepAuthorization, aV as SweepExpectedAuth, a_ as TYPED_DATA_NOT_ALLOWED, b1 as X402ExpectedAuth, b5 as X402PaymentOption, X as X402PaymentRequired, bg as assertBoundDirectPaymentUserOp, c6 as assertFundingLegPaysDelegate, c7 as assertOwnSettlementChild, bh as assertUserOpTypedDataBinding, bi as buildSweepAuthorizationMessage, bj as buildSweepTypedData, bk as buildX402ExpectedMessage, c8 as chainIdForNetwork, bm as connectorRerunCommand, bo as createNextStepBuilder, bp as decodeBase64Json, bs as deriveDelegateAccountAddress, bt as encodeBase64Json, bw as havenClientIdentity, bz as isPackedUserOperationTypedData, c9 as isSettlementChildTypedData, bA as isSupportedNodeVersion, bD as packedUserOperationHash, bH as readClientUpdate, bN as selectStandardPaymentOption, bS as toStandardPaymentRequirements, bT as unsupportedNodeVersionMessage, bV as verifySettlementChild, bX as x402AuthorizationAmount, bZ as x402V2PaymentEnvelope } from './base64-BUMXmruY.cjs';
+export { U as AgentPaymentFailureCode, Y as AgentPaymentNextAction, cb as CAVEAT_ENFORCERS, cc as CAVEAT_TYPEHASH, cd as DELEGATION_MANAGER, ce as DELEGATION_TYPEHASH, cf as DIRECT_PAYMENT_CHAIN_IDS, ac as DIRECT_SIGN_CONTEXT_VERSION, cg as DelegationForHashing, ad as ENTRY_POINT_V07, ch as EXECUTE_ABI, af as HAVEN_CLIENT_HEADER, ag as HAVEN_CONNECTOR_CHANNEL, ah as HAVEN_MINIMUM_NODE_VERSION, ci as HYBRID_DELEGATOR_IMPLEMENTATION, an as HavenApiError, a as HavenClientUpdate, I as HavenError, ar as HavenSigningError, at as HavenTypedDataRefusedError, au as HavenUnsupportedSignerVersionError, av as HavenUserOpBindingError, cj as MAX_SETTLEMENT_WINDOW_SECONDS, ax as MAX_TASK_BUDGET_TTL_SECONDS, aC as NextStep, aE as NextStepHandoff, aG as NextStepTarget, aO as ROOT_AUTHORITY, aR as SIGNER_UPDATE_FALLBACK, ck as SIMPLE_FACTORY_ADDRESS, aW as SettlementChildExpectation, cl as SettlementChildTypedData, aX as SignerRefusalCode, j as SweepAuthorization, a$ as SweepExpectedAuth, b4 as TYPED_DATA_NOT_ALLOWED, b5 as TaskBudgetCloseExpectation, b6 as TaskChildExpectation, b7 as TaskChildTypedData, ba as X402ExpectedAuth, be as X402PaymentOption, X as X402PaymentRequired, bp as assertBoundDirectPaymentUserOp, cm as assertFundingLegPaysDelegate, cn as assertOwnSettlementChild, bq as assertOwnTaskBudgetCloseUserOp, br as assertOwnTaskChild, bs as assertUserOpTypedDataBinding, bt as buildSweepAuthorizationMessage, bu as buildSweepTypedData, bv as buildX402ExpectedMessage, co as chainIdForNetwork, bx as connectorRerunCommand, bz as createNextStepBuilder, bA as decodeBase64Json, bD as deriveDelegateAccountAddress, bE as encodeBase64Json, bH as hashDelegation, bI as havenClientIdentity, bL as isPackedUserOperationTypedData, cp as isSettlementChildTypedData, bM as isSupportedNodeVersion, bO as isTaskChildTypedData, bQ as packedUserOperationHash, bU as readClientUpdate, b_ as selectStandardPaymentOption, c3 as toStandardPaymentRequirements, c4 as unsupportedNodeVersionMessage, c6 as verifySettlementChild, c8 as x402AuthorizationAmount, ca as x402V2PaymentEnvelope } from './base64-cD9kR4JL.cjs';
 import { Hex, Address } from 'viem';
 import 'x402/types';
 
@@ -36,6 +36,24 @@ declare function verifySignature(hash: string, signature: string, expectedAddres
  * `@metamask/delegation-abis`' `IDelegationManager` ABI (a devDependency
  * only, in `@haven_ai/signer`'s `package.json`) and pinned against the kit's
  * own encoder by `packages/signer/src/redemption-guard.pins.test.ts`.
+ *
+ * TASK BUDGETS (#3329) widen the accepted chain from exactly one link to ONE
+ * OR TWO: `[budget]` (unchanged) or `[task child, budget]` — leaf first, as
+ * everywhere else in this file. The two-link case is safe by the SAME
+ * reasoning as the one-link case, extended one hop: the task child's own
+ * `delegate` AND `delegator` are this signer's OWN account (a
+ * SELF-delegation — `assertOwnTaskChild` in `task-budget-guards.ts` is what
+ * proves its caveats narrow, never widen, the budget it chains under), and
+ * the budget link underneath it keeps the existing (3)/(4) shape: delegate ==
+ * own account, delegator != own account (a real grant from elsewhere). A
+ * chain redeemed this way can therefore only ever be AS OR MORE restrictive
+ * than redeeming the budget directly — the task child ADDS caveats (amount,
+ * recipient, expiry); it can never remove one, because
+ * `DelegationManager.redeemDelegations` ANDs every caveat of every link in
+ * the chain (the same AND-only property `settlement-child.ts`'s header
+ * documents). Any OTHER two-link chain — a leaf delegated by a third party, a
+ * leaf whose delegate is not this signer's own account, a chain longer than
+ * two — is refused exactly as before.
  */
 
 /** `Delegation` — `(address delegate, address delegator, bytes32 authority, Caveat[] caveats, uint256 salt, bytes signature)`. */
@@ -95,9 +113,11 @@ declare const REDEEM_DELEGATIONS_ABI: readonly [{
 declare const SINGLE_DEFAULT_MODE: Hex;
 /**
  * Verify `redeemCalldata` (the bytes passed to `execute()`, selector already
- * confirmed to be `redeemDelegations` by the caller) is EXACTLY Haven's own
- * shape: one delegation, redeemed by `ownAccount`, granted by someone else,
- * in `SingleDefault` mode, with no encoding slack anywhere. Throws
+ * confirmed to be `redeemDelegations` by the caller) is EXACTLY one of Haven's
+ * two shapes: a single delegation redeemed by `ownAccount` and granted by
+ * someone else, or (#3329) that grant behind one task-budget child `ownAccount`
+ * delegated to itself; in `SingleDefault` mode, with no encoding slack
+ * anywhere. Throws
  * `HavenSigningError` (never returns) on any disagreement.
  */
 declare function assertRedeemsOwnBudgetDelegation(redeemCalldata: Hex, ownAccount: Address): void;

package/dist/edge.d.ts

@@ -1,4 +1,4 @@
-export { M as AgentPaymentFailureCode, Q as AgentPaymentNextAction, b_ as CAVEAT_ENFORCERS, b$ as DELEGATION_MANAGER, c0 as DIRECT_PAYMENT_CHAIN_IDS, a7 as DIRECT_SIGN_CONTEXT_VERSION, a8 as ENTRY_POINT_V07, c1 as EXECUTE_ABI, aa as HAVEN_CLIENT_HEADER, ab as HAVEN_CONNECTOR_CHANNEL, ac as HAVEN_MINIMUM_NODE_VERSION, c2 as HYBRID_DELEGATOR_IMPLEMENTATION, ai as HavenApiError, a as HavenClientUpdate, E as HavenError, am as HavenSigningError, ao as HavenTypedDataRefusedError, ap as HavenUnsupportedSignerVersionError, aq as HavenUserOpBindingError, c3 as MAX_SETTLEMENT_WINDOW_SECONDS, aw as NextStep, ay as NextStepHandoff, aA as NextStepTarget, aI as ROOT_AUTHORITY, aL as SIGNER_UPDATE_FALLBACK, c4 as SIMPLE_FACTORY_ADDRESS, aQ as SettlementChildExpectation, c5 as SettlementChildTypedData, aR as SignerRefusalCode, j as SweepAuthorization, aV as SweepExpectedAuth, a_ as TYPED_DATA_NOT_ALLOWED, b1 as X402ExpectedAuth, b5 as X402PaymentOption, X as X402PaymentRequired, bg as assertBoundDirectPaymentUserOp, c6 as assertFundingLegPaysDelegate, c7 as assertOwnSettlementChild, bh as assertUserOpTypedDataBinding, bi as buildSweepAuthorizationMessage, bj as buildSweepTypedData, bk as buildX402ExpectedMessage, c8 as chainIdForNetwork, bm as connectorRerunCommand, bo as createNextStepBuilder, bp as decodeBase64Json, bs as deriveDelegateAccountAddress, bt as encodeBase64Json, bw as havenClientIdentity, bz as isPackedUserOperationTypedData, c9 as isSettlementChildTypedData, bA as isSupportedNodeVersion, bD as packedUserOperationHash, bH as readClientUpdate, bN as selectStandardPaymentOption, bS as toStandardPaymentRequirements, bT as unsupportedNodeVersionMessage, bV as verifySettlementChild, bX as x402AuthorizationAmount, bZ as x402V2PaymentEnvelope } from './base64-BUMXmruY.js';
+export { U as AgentPaymentFailureCode, Y as AgentPaymentNextAction, cb as CAVEAT_ENFORCERS, cc as CAVEAT_TYPEHASH, cd as DELEGATION_MANAGER, ce as DELEGATION_TYPEHASH, cf as DIRECT_PAYMENT_CHAIN_IDS, ac as DIRECT_SIGN_CONTEXT_VERSION, cg as DelegationForHashing, ad as ENTRY_POINT_V07, ch as EXECUTE_ABI, af as HAVEN_CLIENT_HEADER, ag as HAVEN_CONNECTOR_CHANNEL, ah as HAVEN_MINIMUM_NODE_VERSION, ci as HYBRID_DELEGATOR_IMPLEMENTATION, an as HavenApiError, a as HavenClientUpdate, I as HavenError, ar as HavenSigningError, at as HavenTypedDataRefusedError, au as HavenUnsupportedSignerVersionError, av as HavenUserOpBindingError, cj as MAX_SETTLEMENT_WINDOW_SECONDS, ax as MAX_TASK_BUDGET_TTL_SECONDS, aC as NextStep, aE as NextStepHandoff, aG as NextStepTarget, aO as ROOT_AUTHORITY, aR as SIGNER_UPDATE_FALLBACK, ck as SIMPLE_FACTORY_ADDRESS, aW as SettlementChildExpectation, cl as SettlementChildTypedData, aX as SignerRefusalCode, j as SweepAuthorization, a$ as SweepExpectedAuth, b4 as TYPED_DATA_NOT_ALLOWED, b5 as TaskBudgetCloseExpectation, b6 as TaskChildExpectation, b7 as TaskChildTypedData, ba as X402ExpectedAuth, be as X402PaymentOption, X as X402PaymentRequired, bp as assertBoundDirectPaymentUserOp, cm as assertFundingLegPaysDelegate, cn as assertOwnSettlementChild, bq as assertOwnTaskBudgetCloseUserOp, br as assertOwnTaskChild, bs as assertUserOpTypedDataBinding, bt as buildSweepAuthorizationMessage, bu as buildSweepTypedData, bv as buildX402ExpectedMessage, co as chainIdForNetwork, bx as connectorRerunCommand, bz as createNextStepBuilder, bA as decodeBase64Json, bD as deriveDelegateAccountAddress, bE as encodeBase64Json, bH as hashDelegation, bI as havenClientIdentity, bL as isPackedUserOperationTypedData, cp as isSettlementChildTypedData, bM as isSupportedNodeVersion, bO as isTaskChildTypedData, bQ as packedUserOperationHash, bU as readClientUpdate, b_ as selectStandardPaymentOption, c3 as toStandardPaymentRequirements, c4 as unsupportedNodeVersionMessage, c6 as verifySettlementChild, c8 as x402AuthorizationAmount, ca as x402V2PaymentEnvelope } from './base64-cD9kR4JL.js';
 import { Hex, Address } from 'viem';
 import 'x402/types';
 
@@ -36,6 +36,24 @@ declare function verifySignature(hash: string, signature: string, expectedAddres
  * `@metamask/delegation-abis`' `IDelegationManager` ABI (a devDependency
  * only, in `@haven_ai/signer`'s `package.json`) and pinned against the kit's
  * own encoder by `packages/signer/src/redemption-guard.pins.test.ts`.
+ *
+ * TASK BUDGETS (#3329) widen the accepted chain from exactly one link to ONE
+ * OR TWO: `[budget]` (unchanged) or `[task child, budget]` — leaf first, as
+ * everywhere else in this file. The two-link case is safe by the SAME
+ * reasoning as the one-link case, extended one hop: the task child's own
+ * `delegate` AND `delegator` are this signer's OWN account (a
+ * SELF-delegation — `assertOwnTaskChild` in `task-budget-guards.ts` is what
+ * proves its caveats narrow, never widen, the budget it chains under), and
+ * the budget link underneath it keeps the existing (3)/(4) shape: delegate ==
+ * own account, delegator != own account (a real grant from elsewhere). A
+ * chain redeemed this way can therefore only ever be AS OR MORE restrictive
+ * than redeeming the budget directly — the task child ADDS caveats (amount,
+ * recipient, expiry); it can never remove one, because
+ * `DelegationManager.redeemDelegations` ANDs every caveat of every link in
+ * the chain (the same AND-only property `settlement-child.ts`'s header
+ * documents). Any OTHER two-link chain — a leaf delegated by a third party, a
+ * leaf whose delegate is not this signer's own account, a chain longer than
+ * two — is refused exactly as before.
  */
 
 /** `Delegation` — `(address delegate, address delegator, bytes32 authority, Caveat[] caveats, uint256 salt, bytes signature)`. */
@@ -95,9 +113,11 @@ declare const REDEEM_DELEGATIONS_ABI: readonly [{
 declare const SINGLE_DEFAULT_MODE: Hex;
 /**
  * Verify `redeemCalldata` (the bytes passed to `execute()`, selector already
- * confirmed to be `redeemDelegations` by the caller) is EXACTLY Haven's own
- * shape: one delegation, redeemed by `ownAccount`, granted by someone else,
- * in `SingleDefault` mode, with no encoding slack anywhere. Throws
+ * confirmed to be `redeemDelegations` by the caller) is EXACTLY one of Haven's
+ * two shapes: a single delegation redeemed by `ownAccount` and granted by
+ * someone else, or (#3329) that grant behind one task-budget child `ownAccount`
+ * delegated to itself; in `SingleDefault` mode, with no encoding slack
+ * anywhere. Throws
  * `HavenSigningError` (never returns) on any disagreement.
  */
 declare function assertRedeemsOwnBudgetDelegation(redeemCalldata: Hex, ownAccount: Address): void;

package/dist/edge.js

@@ -1,6 +1,6 @@
-export { DIRECT_PAYMENT_CHAIN_IDS, EXECUTE_ABI, HAVEN_CLIENT_HEADER, HAVEN_MINIMUM_NODE_VERSION, HavenTypedDataRefusedError, TYPED_DATA_NOT_ALLOWED, assertBoundDirectPaymentUserOp, assertFundingLegPaysDelegate, assertOwnSettlementChild, buildSweepAuthorizationMessage, buildSweepTypedData, buildX402ExpectedMessage, createNextStepBuilder, decodeBase64Json, encodeBase64Json, havenClientIdentity, isSupportedNodeVersion, readClientUpdate, selectStandardPaymentOption, toStandardPaymentRequirements, unsupportedNodeVersionMessage, x402AuthorizationAmount, x402V2PaymentEnvelope } from './chunk-KQ7JXKTV.js';
-import { HavenSigningError } from './chunk-GLNG2GF7.js';
-export { AgentPaymentFailureCode, AgentPaymentNextAction, CAVEAT_ENFORCERS, DELEGATION_MANAGER, DELEGATION_TUPLE_COMPONENTS, DIRECT_SIGN_CONTEXT_VERSION, ENTRY_POINT_V07, HAVEN_CONNECTOR_CHANNEL, HYBRID_DELEGATOR_IMPLEMENTATION, HavenApiError, HavenError, HavenSigningError, HavenUnsupportedSignerVersionError, HavenUserOpBindingError, MAX_SETTLEMENT_WINDOW_SECONDS, REDEEM_DELEGATIONS_ABI, ROOT_AUTHORITY, SIGNER_UPDATE_FALLBACK, SIMPLE_FACTORY_ADDRESS, SINGLE_DEFAULT_MODE, SignerRefusalCode, assertRedeemsOwnBudgetDelegation, assertUserOpTypedDataBinding, chainIdForNetwork, connectorRerunCommand, deriveDelegateAccountAddress, isPackedUserOperationTypedData, isSettlementChildTypedData, packedUserOperationHash, verifySettlementChild } from './chunk-GLNG2GF7.js';
+export { CAVEAT_TYPEHASH, DELEGATION_TYPEHASH, DIRECT_PAYMENT_CHAIN_IDS, EXECUTE_ABI, HAVEN_CLIENT_HEADER, HAVEN_MINIMUM_NODE_VERSION, HavenTypedDataRefusedError, MAX_TASK_BUDGET_TTL_SECONDS, TYPED_DATA_NOT_ALLOWED, assertBoundDirectPaymentUserOp, assertFundingLegPaysDelegate, assertOwnSettlementChild, assertOwnTaskBudgetCloseUserOp, assertOwnTaskChild, buildSweepAuthorizationMessage, buildSweepTypedData, buildX402ExpectedMessage, createNextStepBuilder, decodeBase64Json, encodeBase64Json, hashDelegation, havenClientIdentity, isSupportedNodeVersion, isTaskChildTypedData, readClientUpdate, selectStandardPaymentOption, toStandardPaymentRequirements, unsupportedNodeVersionMessage, x402AuthorizationAmount, x402V2PaymentEnvelope } from './chunk-3WSEX3GW.js';
+import { HavenSigningError } from './chunk-63GPTEEY.js';
+export { AgentPaymentFailureCode, AgentPaymentNextAction, CAVEAT_ENFORCERS, DELEGATION_MANAGER, DELEGATION_TUPLE_COMPONENTS, DIRECT_SIGN_CONTEXT_VERSION, ENTRY_POINT_V07, HAVEN_CONNECTOR_CHANNEL, HYBRID_DELEGATOR_IMPLEMENTATION, HavenApiError, HavenError, HavenSigningError, HavenUnsupportedSignerVersionError, HavenUserOpBindingError, MAX_SETTLEMENT_WINDOW_SECONDS, REDEEM_DELEGATIONS_ABI, ROOT_AUTHORITY, SIGNER_UPDATE_FALLBACK, SIMPLE_FACTORY_ADDRESS, SINGLE_DEFAULT_MODE, SignerRefusalCode, assertRedeemsOwnBudgetDelegation, assertUserOpTypedDataBinding, chainIdForNetwork, connectorRerunCommand, deriveDelegateAccountAddress, isPackedUserOperationTypedData, isSettlementChildTypedData, packedUserOperationHash, verifySettlementChild } from './chunk-63GPTEEY.js';
 import { secp256k1 } from '@noble/curves/secp256k1';
 import { privateKeyToAddress, publicKeyToAddress } from 'viem/accounts';
 import { serializeSignature } from 'viem';