@haven_ai/sdk 0.5.0-alpha.1 → 0.7.0-alpha.0

package/dist/edge.cjs

@@ -1,7 +1,7 @@
 'use strict';
 
-var chunkQSSVOPWA_cjs = require('./chunk-QSSVOPWA.cjs');
-var chunkJKUIE45B_cjs = require('./chunk-JKUIE45B.cjs');
+var chunkJ6DQEBK2_cjs = require('./chunk-J6DQEBK2.cjs');
+var chunk3SVPI4LS_cjs = require('./chunk-3SVPI4LS.cjs');
 var secp256k1 = require('@noble/curves/secp256k1');
 var accounts = require('viem/accounts');
 var viem = require('viem');
@@ -17,7 +17,7 @@ function addressFromKey(privateKey) {
   try {
     return accounts.privateKeyToAddress(`0x${hexBytes(privateKey, 32, "private key")}`);
   } catch (err) {
-    throw new chunkJKUIE45B_cjs.HavenSigningError(
+    throw new chunk3SVPI4LS_cjs.HavenSigningError(
       `Invalid private key: ${err instanceof Error ? err.message : String(err)}`
     );
   }
@@ -31,7 +31,7 @@ function signHash(privateKey, hash) {
       yParity: recovery
     });
   } catch (err) {
-    throw new chunkJKUIE45B_cjs.HavenSigningError(
+    throw new chunk3SVPI4LS_cjs.HavenSigningError(
       `Failed to sign hash: ${err instanceof Error ? err.message : String(err)}`
     );
   }
@@ -52,219 +52,458 @@ function verifySignature(hash, signature, expectedAddress) {
   }
 }
 
+// src/sub-budget-guards.ts
+var ERC20_PERIOD_TRANSFER_ENFORCER = "0x474e3Ae7E169e940607cC624Da8A15Eb120139aB";
+var DELEGATION_DOMAIN_NAME = "DelegationManager";
+var DELEGATION_DOMAIN_VERSION = "1";
+var EXPECTED_DELEGATION_TYPES = {
+  Caveat: [
+    { name: "enforcer", type: "address" },
+    { name: "terms", type: "bytes" }
+  ],
+  Delegation: [
+    { name: "delegate", type: "address" },
+    { name: "delegator", type: "address" },
+    { name: "authority", type: "bytes32" },
+    { name: "caveats", type: "Caveat[]" },
+    { name: "salt", type: "uint256" }
+  ]
+};
+function same(a, b) {
+  return !!a && !!b && a.toLowerCase() === b.toLowerCase();
+}
+function sliceTerms(terms, start, end) {
+  const body = terms.startsWith("0x") ? terms.slice(2).toLowerCase() : terms.toLowerCase();
+  return end === void 0 ? body.slice(start * 2) : body.slice(start * 2, end * 2);
+}
+function findCaveat(caveats, enforcer) {
+  return caveats.find((c) => same(c.enforcer, enforcer));
+}
+function hashSubBudgetDelegation(delegation) {
+  return chunkJ6DQEBK2_cjs.hashDelegation(delegation);
+}
+function refuseSubBudgetChild(what, detail) {
+  throw new chunkJ6DQEBK2_cjs.HavenTypedDataRefusedError(
+    `Refusing to sign the sub-budget child: ${what}. ${detail} This signature opens a slice of the delegating agent budget for another agent, so it is verified locally against the expectation Haven declared, rather than trusted.`
+  );
+}
+function assertOwnSubBudgetChild(typedData, expected, delegateAddress, now = Date.now()) {
+  const td = typedData;
+  if (td?.primaryType !== "Delegation") {
+    refuseSubBudgetChild("it is not a Delegation payload", `primaryType was '${String(td?.primaryType)}'.`);
+  }
+  if (!same(td.domain?.verifyingContract, chunk3SVPI4LS_cjs.DELEGATION_MANAGER)) {
+    refuseSubBudgetChild(
+      "the EIP-712 domain names an unknown DelegationManager",
+      `Expected ${chunk3SVPI4LS_cjs.DELEGATION_MANAGER}, got ${td.domain?.verifyingContract}.`
+    );
+  }
+  if (td.domain?.name !== DELEGATION_DOMAIN_NAME || td.domain?.version !== DELEGATION_DOMAIN_VERSION) {
+    refuseSubBudgetChild(
+      "the EIP-712 domain name/version does not match the pinned DelegationManager domain",
+      `Expected name '${DELEGATION_DOMAIN_NAME}' version '${DELEGATION_DOMAIN_VERSION}'; got name '${String(td.domain?.name)}' version '${String(td.domain?.version)}'.`
+    );
+  }
+  if (JSON.stringify(td.types?.Caveat) !== JSON.stringify(EXPECTED_DELEGATION_TYPES.Caveat) || JSON.stringify(td.types?.Delegation) !== JSON.stringify(EXPECTED_DELEGATION_TYPES.Delegation)) {
+    refuseSubBudgetChild(
+      "its EIP-712 type definitions do not match the pinned Delegation/Caveat shape",
+      "A renamed, reordered, or additional field on Delegation or Caveat could change what the caveats below mean without changing this check's field-by-field comparisons."
+    );
+  }
+  const domainChain = Number(td.domain?.chainId);
+  if (!Number.isFinite(domainChain) || !chunkJ6DQEBK2_cjs.DIRECT_PAYMENT_CHAIN_IDS.has(domainChain)) {
+    refuseSubBudgetChild(
+      "it is scoped to a chain the delegation rail has no pinned contracts for",
+      `Chains with pinned contracts: ${[...chunkJ6DQEBK2_cjs.DIRECT_PAYMENT_CHAIN_IDS].join(", ")}; the child says ${String(td.domain?.chainId)}.`
+    );
+  }
+  if (domainChain !== expected.chainId) {
+    refuseSubBudgetChild(
+      "it is scoped to the wrong chain",
+      `Expected chain ${expected.chainId}; the child says ${td.domain?.chainId}.`
+    );
+  }
+  const ownAccount = chunk3SVPI4LS_cjs.deriveDelegateAccountAddress(delegateAddress);
+  const delegator = td.message?.delegator;
+  if (typeof delegator !== "string" || !same(delegator, ownAccount)) {
+    refuseSubBudgetChild(
+      "it is not delegated by this agent's own account",
+      `Expected delegator ${ownAccount}; the child names ${String(delegator)}.`
+    );
+  }
+  if (!same(delegator, expected.delegateAccount)) {
+    refuseSubBudgetChild(
+      "its delegator does not match the account Haven declared",
+      `Expected ${expected.delegateAccount}; the child names ${String(delegator)}.`
+    );
+  }
+  const delegate = td.message?.delegate;
+  if (typeof delegate !== "string" || !same(delegate, expected.childDelegateAccount)) {
+    refuseSubBudgetChild(
+      "its delegate does not match the declared child delegate",
+      `Expected ${expected.childDelegateAccount}; the child names ${String(delegate)}.`
+    );
+  }
+  const authority = td.message?.authority;
+  if (typeof authority !== "string" || !/^0x[0-9a-fA-F]{64}$/.test(authority)) {
+    refuseSubBudgetChild("its authority is not a 32-byte delegation hash", `Got ${String(authority)}.`);
+  }
+  if (authority.toLowerCase() === chunk3SVPI4LS_cjs.ROOT_AUTHORITY) {
+    refuseSubBudgetChild(
+      "it is a ROOT delegation, not a re-delegation of the delegating agent budget",
+      "A sub-budget always chains under the delegating agent budget delegation."
+    );
+  }
+  if (!same(authority, expected.parentDelegationHash)) {
+    refuseSubBudgetChild(
+      "it chains under a different parent delegation",
+      `Expected authority ${expected.parentDelegationHash}; the child says ${authority}.`
+    );
+  }
+  const caveats = td.message?.caveats ?? [];
+  if (findCaveat(caveats, chunk3SVPI4LS_cjs.CAVEAT_ENFORCERS.erc20TransferAmount)) {
+    refuseSubBudgetChild(
+      "it carries a hard-cap transfer-amount caveat (the task-budget shape)",
+      "A sub-budget is period-scoped: its amount caveat must be an ERC20PeriodTransferEnforcer caveat slicing the parent period meter, never a lifetime cap."
+    );
+  }
+  const period = findCaveat(caveats, ERC20_PERIOD_TRANSFER_ENFORCER);
+  if (!period) {
+    refuseSubBudgetChild(
+      "it has no ERC-20 period-transfer caveat",
+      "Without it the child is not bounded to a per-period amount."
+    );
+  }
+  const token = `0x${sliceTerms(period.terms, 0, 20)}`;
+  if (!same(token, expected.tokenAddress)) {
+    refuseSubBudgetChild("it spends a different token", `Expected ${expected.tokenAddress}, child pins ${token}.`);
+  }
+  const periodAmount = BigInt(`0x${sliceTerms(period.terms, 20, 52)}`);
+  if (periodAmount !== BigInt(expected.periodAmountAtomic)) {
+    refuseSubBudgetChild(
+      "the period amount does not match",
+      `Expected ${expected.periodAmountAtomic}; the child allows ${periodAmount.toString()}.`
+    );
+  }
+  const periodDuration = Number(BigInt(`0x${sliceTerms(period.terms, 52, 84)}`));
+  if (periodDuration !== expected.periodDurationSeconds) {
+    refuseSubBudgetChild(
+      "its period duration does not match the parent window Haven declared",
+      `Expected ${expected.periodDurationSeconds}s; the child says ${periodDuration}s. A sub-budget is a slice of the parent period meter \u2014 same window, smaller amount \u2014 never a different clock.`
+    );
+  }
+  const startDate = Number(BigInt(`0x${sliceTerms(period.terms, 84, 116)}`));
+  if (startDate !== expected.startDate) {
+    refuseSubBudgetChild(
+      "its period start does not match the parent anchor Haven declared",
+      `Expected ${expected.startDate}; the child says ${startDate}.`
+    );
+  }
+  const timestamp = findCaveat(caveats, chunk3SVPI4LS_cjs.CAVEAT_ENFORCERS.timestamp);
+  if (!timestamp) {
+    refuseSubBudgetChild("it never expires", "A sub-budget child without a timestamp caveat is open-ended.");
+  }
+  const beforeThreshold = Number(BigInt(`0x${sliceTerms(timestamp.terms, 16, 32)}`));
+  const nowSec = Math.floor(now / 1e3);
+  if (beforeThreshold <= nowSec) {
+    refuseSubBudgetChild("it has already expired", `Expiry ${beforeThreshold} is not in the future.`);
+  }
+  if (beforeThreshold !== expected.expiresAt) {
+    refuseSubBudgetChild(
+      "its expiry does not match what Haven declared",
+      `Expected ${expected.expiresAt}; the child says ${beforeThreshold}.`
+    );
+  }
+  const calldata = findCaveat(caveats, chunk3SVPI4LS_cjs.CAVEAT_ENFORCERS.allowedCalldata);
+  if (expected.recipientAddress) {
+    if (!calldata) {
+      refuseSubBudgetChild(
+        "it has no recipient pin",
+        "The sub-budget was issued with a pinned recipient, so the child must carry one."
+      );
+    }
+    const startIndex = BigInt(`0x${sliceTerms(calldata.terms, 0, 32)}`);
+    if (startIndex !== 4n) {
+      refuseSubBudgetChild(
+        "the recipient pin points at the wrong calldata offset",
+        `Expected offset 4, got ${startIndex.toString()}.`
+      );
+    }
+    const paddedRecipient = sliceTerms(calldata.terms, 32, 64);
+    if (paddedRecipient.slice(0, 24) !== "0".repeat(24)) {
+      refuseSubBudgetChild("the pinned recipient is not a plain address", "Its 32-byte word is not a padded address.");
+    }
+    const recipient = `0x${paddedRecipient.slice(24)}`;
+    if (!same(recipient, expected.recipientAddress)) {
+      refuseSubBudgetChild(
+        "it pins a different recipient than Haven declared",
+        `Expected ${expected.recipientAddress}; the child pins ${recipient}.`
+      );
+    }
+  } else if (calldata) {
+    refuseSubBudgetChild(
+      "it pins a recipient the sub-budget was not issued with",
+      "This sub-budget is open (no recipient pin); the child must not add one."
+    );
+  }
+}
+function assertOwnSubBudgetCloseUserOp(typedData, expected, delegateAddress) {
+  chunkJ6DQEBK2_cjs.assertOwnTaskBudgetCloseUserOp(typedData, expected, delegateAddress);
+}
+
+Object.defineProperty(exports, "CAVEAT_TYPEHASH", {
+  enumerable: true,
+  get: function () { return chunkJ6DQEBK2_cjs.CAVEAT_TYPEHASH; }
+});
+Object.defineProperty(exports, "DELEGATION_TYPEHASH", {
+  enumerable: true,
+  get: function () { return chunkJ6DQEBK2_cjs.DELEGATION_TYPEHASH; }
+});
 Object.defineProperty(exports, "DIRECT_PAYMENT_CHAIN_IDS", {
   enumerable: true,
-  get: function () { return chunkQSSVOPWA_cjs.DIRECT_PAYMENT_CHAIN_IDS; }
+  get: function () { return chunkJ6DQEBK2_cjs.DIRECT_PAYMENT_CHAIN_IDS; }
 });
 Object.defineProperty(exports, "EXECUTE_ABI", {
   enumerable: true,
-  get: function () { return chunkQSSVOPWA_cjs.EXECUTE_ABI; }
+  get: function () { return chunkJ6DQEBK2_cjs.EXECUTE_ABI; }
 });
 Object.defineProperty(exports, "HAVEN_CLIENT_HEADER", {
   enumerable: true,
-  get: function () { return chunkQSSVOPWA_cjs.HAVEN_CLIENT_HEADER; }
+  get: function () { return chunkJ6DQEBK2_cjs.HAVEN_CLIENT_HEADER; }
 });
 Object.defineProperty(exports, "HAVEN_MINIMUM_NODE_VERSION", {
   enumerable: true,
-  get: function () { return chunkQSSVOPWA_cjs.HAVEN_MINIMUM_NODE_VERSION; }
+  get: function () { return chunkJ6DQEBK2_cjs.HAVEN_MINIMUM_NODE_VERSION; }
 });
 Object.defineProperty(exports, "HavenTypedDataRefusedError", {
   enumerable: true,
-  get: function () { return chunkQSSVOPWA_cjs.HavenTypedDataRefusedError; }
+  get: function () { return chunkJ6DQEBK2_cjs.HavenTypedDataRefusedError; }
+});
+Object.defineProperty(exports, "MAX_TASK_BUDGET_TTL_SECONDS", {
+  enumerable: true,
+  get: function () { return chunkJ6DQEBK2_cjs.MAX_TASK_BUDGET_TTL_SECONDS; }
 });
 Object.defineProperty(exports, "TYPED_DATA_NOT_ALLOWED", {
   enumerable: true,
-  get: function () { return chunkQSSVOPWA_cjs.TYPED_DATA_NOT_ALLOWED; }
+  get: function () { return chunkJ6DQEBK2_cjs.TYPED_DATA_NOT_ALLOWED; }
 });
 Object.defineProperty(exports, "assertBoundDirectPaymentUserOp", {
   enumerable: true,
-  get: function () { return chunkQSSVOPWA_cjs.assertBoundDirectPaymentUserOp; }
+  get: function () { return chunkJ6DQEBK2_cjs.assertBoundDirectPaymentUserOp; }
 });
 Object.defineProperty(exports, "assertFundingLegPaysDelegate", {
   enumerable: true,
-  get: function () { return chunkQSSVOPWA_cjs.assertFundingLegPaysDelegate; }
+  get: function () { return chunkJ6DQEBK2_cjs.assertFundingLegPaysDelegate; }
 });
 Object.defineProperty(exports, "assertOwnSettlementChild", {
   enumerable: true,
-  get: function () { return chunkQSSVOPWA_cjs.assertOwnSettlementChild; }
+  get: function () { return chunkJ6DQEBK2_cjs.assertOwnSettlementChild; }
+});
+Object.defineProperty(exports, "assertOwnTaskBudgetCloseUserOp", {
+  enumerable: true,
+  get: function () { return chunkJ6DQEBK2_cjs.assertOwnTaskBudgetCloseUserOp; }
+});
+Object.defineProperty(exports, "assertOwnTaskChild", {
+  enumerable: true,
+  get: function () { return chunkJ6DQEBK2_cjs.assertOwnTaskChild; }
 });
 Object.defineProperty(exports, "buildSweepAuthorizationMessage", {
   enumerable: true,
-  get: function () { return chunkQSSVOPWA_cjs.buildSweepAuthorizationMessage; }
+  get: function () { return chunkJ6DQEBK2_cjs.buildSweepAuthorizationMessage; }
 });
 Object.defineProperty(exports, "buildSweepTypedData", {
   enumerable: true,
-  get: function () { return chunkQSSVOPWA_cjs.buildSweepTypedData; }
+  get: function () { return chunkJ6DQEBK2_cjs.buildSweepTypedData; }
 });
 Object.defineProperty(exports, "buildX402ExpectedMessage", {
   enumerable: true,
-  get: function () { return chunkQSSVOPWA_cjs.buildX402ExpectedMessage; }
+  get: function () { return chunkJ6DQEBK2_cjs.buildX402ExpectedMessage; }
 });
 Object.defineProperty(exports, "createNextStepBuilder", {
   enumerable: true,
-  get: function () { return chunkQSSVOPWA_cjs.createNextStepBuilder; }
+  get: function () { return chunkJ6DQEBK2_cjs.createNextStepBuilder; }
 });
 Object.defineProperty(exports, "decodeBase64Json", {
   enumerable: true,
-  get: function () { return chunkQSSVOPWA_cjs.decodeBase64Json; }
+  get: function () { return chunkJ6DQEBK2_cjs.decodeBase64Json; }
 });
 Object.defineProperty(exports, "encodeBase64Json", {
   enumerable: true,
-  get: function () { return chunkQSSVOPWA_cjs.encodeBase64Json; }
+  get: function () { return chunkJ6DQEBK2_cjs.encodeBase64Json; }
+});
+Object.defineProperty(exports, "hashDelegation", {
+  enumerable: true,
+  get: function () { return chunkJ6DQEBK2_cjs.hashDelegation; }
 });
 Object.defineProperty(exports, "havenClientIdentity", {
   enumerable: true,
-  get: function () { return chunkQSSVOPWA_cjs.havenClientIdentity; }
+  get: function () { return chunkJ6DQEBK2_cjs.havenClientIdentity; }
 });
 Object.defineProperty(exports, "isSupportedNodeVersion", {
   enumerable: true,
-  get: function () { return chunkQSSVOPWA_cjs.isSupportedNodeVersion; }
+  get: function () { return chunkJ6DQEBK2_cjs.isSupportedNodeVersion; }
+});
+Object.defineProperty(exports, "isTaskChildTypedData", {
+  enumerable: true,
+  get: function () { return chunkJ6DQEBK2_cjs.isTaskChildTypedData; }
 });
 Object.defineProperty(exports, "readClientUpdate", {
   enumerable: true,
-  get: function () { return chunkQSSVOPWA_cjs.readClientUpdate; }
+  get: function () { return chunkJ6DQEBK2_cjs.readClientUpdate; }
 });
 Object.defineProperty(exports, "selectStandardPaymentOption", {
   enumerable: true,
-  get: function () { return chunkQSSVOPWA_cjs.selectStandardPaymentOption; }
+  get: function () { return chunkJ6DQEBK2_cjs.selectStandardPaymentOption; }
 });
 Object.defineProperty(exports, "toStandardPaymentRequirements", {
   enumerable: true,
-  get: function () { return chunkQSSVOPWA_cjs.toStandardPaymentRequirements; }
+  get: function () { return chunkJ6DQEBK2_cjs.toStandardPaymentRequirements; }
 });
 Object.defineProperty(exports, "unsupportedNodeVersionMessage", {
   enumerable: true,
-  get: function () { return chunkQSSVOPWA_cjs.unsupportedNodeVersionMessage; }
+  get: function () { return chunkJ6DQEBK2_cjs.unsupportedNodeVersionMessage; }
 });
 Object.defineProperty(exports, "x402AuthorizationAmount", {
   enumerable: true,
-  get: function () { return chunkQSSVOPWA_cjs.x402AuthorizationAmount; }
+  get: function () { return chunkJ6DQEBK2_cjs.x402AuthorizationAmount; }
 });
 Object.defineProperty(exports, "x402V2PaymentEnvelope", {
   enumerable: true,
-  get: function () { return chunkQSSVOPWA_cjs.x402V2PaymentEnvelope; }
+  get: function () { return chunkJ6DQEBK2_cjs.x402V2PaymentEnvelope; }
 });
 Object.defineProperty(exports, "AgentPaymentFailureCode", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.AgentPaymentFailureCode; }
+  get: function () { return chunk3SVPI4LS_cjs.AgentPaymentFailureCode; }
 });
 Object.defineProperty(exports, "AgentPaymentNextAction", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.AgentPaymentNextAction; }
+  get: function () { return chunk3SVPI4LS_cjs.AgentPaymentNextAction; }
 });
 Object.defineProperty(exports, "CAVEAT_ENFORCERS", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.CAVEAT_ENFORCERS; }
+  get: function () { return chunk3SVPI4LS_cjs.CAVEAT_ENFORCERS; }
 });
 Object.defineProperty(exports, "DELEGATION_MANAGER", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.DELEGATION_MANAGER; }
+  get: function () { return chunk3SVPI4LS_cjs.DELEGATION_MANAGER; }
 });
 Object.defineProperty(exports, "DELEGATION_TUPLE_COMPONENTS", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.DELEGATION_TUPLE_COMPONENTS; }
+  get: function () { return chunk3SVPI4LS_cjs.DELEGATION_TUPLE_COMPONENTS; }
 });
 Object.defineProperty(exports, "DIRECT_SIGN_CONTEXT_VERSION", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.DIRECT_SIGN_CONTEXT_VERSION; }
+  get: function () { return chunk3SVPI4LS_cjs.DIRECT_SIGN_CONTEXT_VERSION; }
 });
 Object.defineProperty(exports, "ENTRY_POINT_V07", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.ENTRY_POINT_V07; }
+  get: function () { return chunk3SVPI4LS_cjs.ENTRY_POINT_V07; }
 });
 Object.defineProperty(exports, "HAVEN_CONNECTOR_CHANNEL", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.HAVEN_CONNECTOR_CHANNEL; }
+  get: function () { return chunk3SVPI4LS_cjs.HAVEN_CONNECTOR_CHANNEL; }
 });
 Object.defineProperty(exports, "HYBRID_DELEGATOR_IMPLEMENTATION", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.HYBRID_DELEGATOR_IMPLEMENTATION; }
+  get: function () { return chunk3SVPI4LS_cjs.HYBRID_DELEGATOR_IMPLEMENTATION; }
 });
 Object.defineProperty(exports, "HavenApiError", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.HavenApiError; }
+  get: function () { return chunk3SVPI4LS_cjs.HavenApiError; }
 });
 Object.defineProperty(exports, "HavenError", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.HavenError; }
+  get: function () { return chunk3SVPI4LS_cjs.HavenError; }
 });
 Object.defineProperty(exports, "HavenSigningError", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.HavenSigningError; }
+  get: function () { return chunk3SVPI4LS_cjs.HavenSigningError; }
 });
 Object.defineProperty(exports, "HavenUnsupportedSignerVersionError", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.HavenUnsupportedSignerVersionError; }
+  get: function () { return chunk3SVPI4LS_cjs.HavenUnsupportedSignerVersionError; }
 });
 Object.defineProperty(exports, "HavenUserOpBindingError", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.HavenUserOpBindingError; }
+  get: function () { return chunk3SVPI4LS_cjs.HavenUserOpBindingError; }
 });
 Object.defineProperty(exports, "MAX_SETTLEMENT_WINDOW_SECONDS", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.MAX_SETTLEMENT_WINDOW_SECONDS; }
+  get: function () { return chunk3SVPI4LS_cjs.MAX_SETTLEMENT_WINDOW_SECONDS; }
 });
 Object.defineProperty(exports, "REDEEM_DELEGATIONS_ABI", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.REDEEM_DELEGATIONS_ABI; }
+  get: function () { return chunk3SVPI4LS_cjs.REDEEM_DELEGATIONS_ABI; }
 });
 Object.defineProperty(exports, "ROOT_AUTHORITY", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.ROOT_AUTHORITY; }
+  get: function () { return chunk3SVPI4LS_cjs.ROOT_AUTHORITY; }
 });
 Object.defineProperty(exports, "SIGNER_UPDATE_FALLBACK", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.SIGNER_UPDATE_FALLBACK; }
+  get: function () { return chunk3SVPI4LS_cjs.SIGNER_UPDATE_FALLBACK; }
 });
 Object.defineProperty(exports, "SIMPLE_FACTORY_ADDRESS", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.SIMPLE_FACTORY_ADDRESS; }
+  get: function () { return chunk3SVPI4LS_cjs.SIMPLE_FACTORY_ADDRESS; }
 });
 Object.defineProperty(exports, "SINGLE_DEFAULT_MODE", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.SINGLE_DEFAULT_MODE; }
+  get: function () { return chunk3SVPI4LS_cjs.SINGLE_DEFAULT_MODE; }
 });
 Object.defineProperty(exports, "SignerRefusalCode", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.SignerRefusalCode; }
+  get: function () { return chunk3SVPI4LS_cjs.SignerRefusalCode; }
+});
+Object.defineProperty(exports, "TASK_SIGN_CONTEXT_VERSION", {
+  enumerable: true,
+  get: function () { return chunk3SVPI4LS_cjs.TASK_SIGN_CONTEXT_VERSION; }
 });
 Object.defineProperty(exports, "assertRedeemsOwnBudgetDelegation", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.assertRedeemsOwnBudgetDelegation; }
+  get: function () { return chunk3SVPI4LS_cjs.assertRedeemsOwnBudgetDelegation; }
 });
 Object.defineProperty(exports, "assertUserOpTypedDataBinding", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.assertUserOpTypedDataBinding; }
+  get: function () { return chunk3SVPI4LS_cjs.assertUserOpTypedDataBinding; }
 });
 Object.defineProperty(exports, "chainIdForNetwork", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.chainIdForNetwork; }
+  get: function () { return chunk3SVPI4LS_cjs.chainIdForNetwork; }
 });
 Object.defineProperty(exports, "connectorRerunCommand", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.connectorRerunCommand; }
+  get: function () { return chunk3SVPI4LS_cjs.connectorRerunCommand; }
+});
+Object.defineProperty(exports, "connectorUpgradeCommand", {
+  enumerable: true,
+  get: function () { return chunk3SVPI4LS_cjs.connectorUpgradeCommand; }
 });
 Object.defineProperty(exports, "deriveDelegateAccountAddress", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.deriveDelegateAccountAddress; }
+  get: function () { return chunk3SVPI4LS_cjs.deriveDelegateAccountAddress; }
 });
 Object.defineProperty(exports, "isPackedUserOperationTypedData", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.isPackedUserOperationTypedData; }
+  get: function () { return chunk3SVPI4LS_cjs.isPackedUserOperationTypedData; }
 });
 Object.defineProperty(exports, "isSettlementChildTypedData", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.isSettlementChildTypedData; }
+  get: function () { return chunk3SVPI4LS_cjs.isSettlementChildTypedData; }
 });
 Object.defineProperty(exports, "packedUserOperationHash", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.packedUserOperationHash; }
+  get: function () { return chunk3SVPI4LS_cjs.packedUserOperationHash; }
 });
 Object.defineProperty(exports, "verifySettlementChild", {
   enumerable: true,
-  get: function () { return chunkJKUIE45B_cjs.verifySettlementChild; }
+  get: function () { return chunk3SVPI4LS_cjs.verifySettlementChild; }
 });
+exports.ERC20_PERIOD_TRANSFER_ENFORCER = ERC20_PERIOD_TRANSFER_ENFORCER;
 exports.addressFromKey = addressFromKey;
+exports.assertOwnSubBudgetChild = assertOwnSubBudgetChild;
+exports.assertOwnSubBudgetCloseUserOp = assertOwnSubBudgetCloseUserOp;
+exports.hashSubBudgetDelegation = hashSubBudgetDelegation;
 exports.signHash = signHash;
 exports.verifySignature = verifySignature;
 //# sourceMappingURL=edge.cjs.map

package/dist/edge.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/edge-signing.ts"],"names":["privateKeyToAddress","HavenSigningError","secp256k1","serializeSignature","publicKeyToAddress"],"mappings":";;;;;;;;AAsBA,IAAM,MAAA,GAAS,OAAO,oEAAoE,CAAA;AAW1F,SAAS,QAAA,CAAS,KAAA,EAAe,KAAA,EAAe,IAAA,EAAsB;AACpE,EAAA,IAAI,CAAC,mBAAmB,IAAA,CAAK,KAAK,KAAK,KAAA,CAAM,MAAA,KAAW,CAAA,GAAI,KAAA,GAAQ,CAAA,EAAG;AACrE,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,EAAG,IAAI,CAAA,uBAAA,EAA0B,KAAK,CAAA,gBAAA,CAAkB,CAAA;AAAA,EAC1E;AACA,EAAA,OAAO,KAAA,CAAM,MAAM,CAAC,CAAA;AACtB;AAEO,SAAS,eAAe,UAAA,EAA4B;AACzD,EAAA,IAAI;AAEF,IAAA,OAAOA,6BAAoB,CAAA,EAAA,EAAK,QAAA,CAAS,YAAY,EAAA,EAAI,aAAa,CAAC,CAAA,CAAE,CAAA;AAAA,EAC3E,SAAS,GAAA,EAAK;AACZ,IAAA,MAAM,IAAIC,mCAAA;AAAA,MACR,wBAAwB,GAAA,YAAe,KAAA,GAAQ,IAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAC,CAAA;AAAA,KAC1E;AAAA,EACF;AACF;AAEO,SAAS,QAAA,CAAS,YAAoB,IAAA,EAAsB;AACjE,EAAA,IAAI;AACF,IAAA,MAAM,EAAE,GAAG,CAAA,EAAG,QAAA,KAAaC,mBAAA,CAAU,IAAA,CAAK,SAAS,IAAA,EAAM,EAAA,EAAI,MAAM,CAAA,EAAG,QAAA,CAAS,YAAY,EAAA,EAAI,aAAa,GAAG,EAAE,IAAA,EAAM,MAAM,CAAA;AAG7H,IAAA,OAAOC,uBAAA,CAAmB;AAAA,MACxB,CAAA,EAAG,KAAK,CAAA,CAAE,QAAA,CAAS,EAAE,CAAA,CAAE,QAAA,CAAS,EAAA,EAAI,GAAG,CAAC,CAAA,CAAA;AAAA,MACxC,CAAA,EAAG,KAAK,CAAA,CAAE,QAAA,CAAS,EAAE,CAAA,CAAE,QAAA,CAAS,EAAA,EAAI,GAAG,CAAC,CAAA,CAAA;AAAA,MACxC,OAAA,EAAS;AAAA,KACV,CAAA;AAAA,EACH,SAAS,GAAA,EAAK;AACZ,IAAA,MAAM,IAAIF,mCAAA;AAAA,MACR,wBAAwB,GAAA,YAAe,KAAA,GAAQ,IAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAC,CAAA;AAAA,KAC1E;AAAA,EACF;AACF;AAEO,SAAS,eAAA,CAAgB,IAAA,EAAc,SAAA,EAAmB,eAAA,EAAkC;AACjG,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,QAAA,CAAS,SAAA,EAAW,EAAA,EAAI,WAAW,CAAA;AAC/C,IAAA,MAAM,OAAA,GAAU,QAAA,CAAS,IAAA,EAAM,EAAA,EAAI,MAAM,CAAA;AAEzC,IAAA,IAAI,MAAA,CAAO,CAAA,EAAA,EAAK,GAAA,CAAI,KAAA,CAAM,EAAA,EAAI,GAAG,CAAC,CAAA,CAAE,CAAA,GAAI,MAAA,EAAQ,OAAO,KAAA;AACvD,IAAA,MAAM,aAAa,MAAA,CAAO,QAAA,CAAS,IAAI,KAAA,CAAM,GAAG,GAAG,EAAE,CAAA;AACrD,IAAA,MAAM,WAAA,GAAc,UAAA,KAAe,CAAA,IAAK,UAAA,KAAe,EAAA,GAAK,IAAI,UAAA,KAAe,CAAA,IAAK,UAAA,KAAe,EAAA,GAAK,CAAA,GAAI,CAAA,CAAA;AAC5G,IAAA,IAAI,WAAA,GAAc,GAAG,OAAO,KAAA;AAC5B,IAAA,MAAM,YAAYC,mBAAA,CAAU,SAAA,CAAU,WAAA,CAAY,GAAA,CAAI,MAAM,CAAA,EAAG,GAAG,CAAC,CAAA,CAChE,eAAe,WAAW,CAAA,CAC1B,iBAAiB,OAAO,CAAA,CACxB,MAAM,KAAK,CAAA;AACd,IAAA,MAAM,SAAA,GAAYE,2BAAA,CAAmB,CAAA,EAAA,EAAK,SAAS,CAAA,CAAE,CAAA;AACrD,IAAA,OAAO,SAAA,CAAU,WAAA,EAAY,KAAM,eAAA,CAAgB,WAAA,EAAY;AAAA,EACjE,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF","file":"edge.cjs","sourcesContent":["import { secp256k1 } from '@noble/curves/secp256k1'\nimport { privateKeyToAddress, publicKeyToAddress } from 'viem/accounts'\nimport { serializeSignature, type Hex } from 'viem'\nimport { HavenSigningError } from './types.js'\n\n/**\n * #3173: the three key helpers the edge signer needs, without ethers.\n *\n * `./signer.ts` implements the same three on ethers, and the SDK barrel pulls\n * ethers in for them (and for `provider.ts` / `receipt.ts`). The edge signer\n * already ships viem, and viem signs with `@noble/curves` underneath — these\n * use the same curve library directly, synchronously (viem's own `sign` is\n * async), so `@haven_ai/sdk/edge` stays ethers-free and a signer session stops\n * paying for module init it never uses. Byte-equivalence with the ethers forms\n * is pinned in `edge-signing.test.ts`: same address, same 65-byte `r‖s‖v`\n * serialisation with low-s and v = 27/28, same recovery verdicts, and the same\n * refusals (high-s twin, wrong lengths) — with three stated strict-direction\n * exceptions, see `hexBytes`. Raw ECDSA over the hash — never the EIP-191\n * prefixed digest.\n */\n\n/** secp256k1 order / 2 — a signature with s above this is the malleable twin ethers rejects. */\nconst HALF_N = BigInt('0x7FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF5D576E7357A4501DDFE92F46681B20A0')\n\n/**\n * Stricter than ethers, never looser: the lowercase `0x` prefix and the exact\n * byte length are required. Ethers accepts an uppercase `0X` prefix on a\n * signature and the 64-byte EIP-2098 compact form, and is inconsistent on a\n * private key (`Wallet` accepts unprefixed and refuses `0X`; `SigningKey` does\n * the reverse); every such form is refused here — the divergences are pinned\n * in `edge-signing.test.ts` with ethers control assertions, and every\n * well-formed input is byte-equivalent.\n */\nfunction hexBytes(value: string, bytes: number, what: string): string {\n  if (!/^0x[0-9a-fA-F]+$/.test(value) || value.length !== 2 + bytes * 2) {\n    throw new Error(`${what} must be a 0x-prefixed ${bytes}-byte hex string`)\n  }\n  return value.slice(2)\n}\n\nexport function addressFromKey(privateKey: string): string {\n  try {\n    // Same gate as signHash: a key that derives an address must also sign.\n    return privateKeyToAddress(`0x${hexBytes(privateKey, 32, 'private key')}`)\n  } catch (err) {\n    throw new HavenSigningError(\n      `Invalid private key: ${err instanceof Error ? err.message : String(err)}`,\n    )\n  }\n}\n\nexport function signHash(privateKey: string, hash: string): string {\n  try {\n    const { r, s, recovery } = secp256k1.sign(hexBytes(hash, 32, 'hash'), hexBytes(privateKey, 32, 'private key'), { lowS: true })\n    // viem serialises the trailing byte from yParity (0/1 → 27/28), the same\n    // `v` ethers' `Signature.serialized` writes.\n    return serializeSignature({\n      r: `0x${r.toString(16).padStart(64, '0')}`,\n      s: `0x${s.toString(16).padStart(64, '0')}`,\n      yParity: recovery,\n    })\n  } catch (err) {\n    throw new HavenSigningError(\n      `Failed to sign hash: ${err instanceof Error ? err.message : String(err)}`,\n    )\n  }\n}\n\nexport function verifySignature(hash: string, signature: string, expectedAddress: string): boolean {\n  try {\n    const sig = hexBytes(signature, 65, 'signature')\n    const hashHex = hexBytes(hash, 32, 'hash')\n    // Reject the high-s malleable twin, as ethers does — one signature per message.\n    if (BigInt(`0x${sig.slice(64, 128)}`) > HALF_N) return false\n    const yParityOrV = Number.parseInt(sig.slice(128), 16)\n    const recoveryBit = yParityOrV === 0 || yParityOrV === 27 ? 0 : yParityOrV === 1 || yParityOrV === 28 ? 1 : -1\n    if (recoveryBit < 0) return false\n    const publicKey = secp256k1.Signature.fromCompact(sig.slice(0, 128))\n      .addRecoveryBit(recoveryBit)\n      .recoverPublicKey(hashHex)\n      .toHex(false)\n    const recovered = publicKeyToAddress(`0x${publicKey}`)\n    return recovered.toLowerCase() === expectedAddress.toLowerCase()\n  } catch {\n    return false\n  }\n}\n"]}
+{"version":3,"sources":["../src/edge-signing.ts","../src/sub-budget-guards.ts"],"names":["privateKeyToAddress","HavenSigningError","secp256k1","serializeSignature","publicKeyToAddress","hashDelegation","HavenTypedDataRefusedError","DELEGATION_MANAGER","DIRECT_PAYMENT_CHAIN_IDS","deriveDelegateAccountAddress","ROOT_AUTHORITY","CAVEAT_ENFORCERS","assertOwnTaskBudgetCloseUserOp"],"mappings":";;;;;;;;AAsBA,IAAM,MAAA,GAAS,OAAO,oEAAoE,CAAA;AAW1F,SAAS,QAAA,CAAS,KAAA,EAAe,KAAA,EAAe,IAAA,EAAsB;AACpE,EAAA,IAAI,CAAC,mBAAmB,IAAA,CAAK,KAAK,KAAK,KAAA,CAAM,MAAA,KAAW,CAAA,GAAI,KAAA,GAAQ,CAAA,EAAG;AACrE,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,EAAG,IAAI,CAAA,uBAAA,EAA0B,KAAK,CAAA,gBAAA,CAAkB,CAAA;AAAA,EAC1E;AACA,EAAA,OAAO,KAAA,CAAM,MAAM,CAAC,CAAA;AACtB;AAEO,SAAS,eAAe,UAAA,EAA4B;AACzD,EAAA,IAAI;AAEF,IAAA,OAAOA,6BAAoB,CAAA,EAAA,EAAK,QAAA,CAAS,YAAY,EAAA,EAAI,aAAa,CAAC,CAAA,CAAE,CAAA;AAAA,EAC3E,SAAS,GAAA,EAAK;AACZ,IAAA,MAAM,IAAIC,mCAAA;AAAA,MACR,wBAAwB,GAAA,YAAe,KAAA,GAAQ,IAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAC,CAAA;AAAA,KAC1E;AAAA,EACF;AACF;AAEO,SAAS,QAAA,CAAS,YAAoB,IAAA,EAAsB;AACjE,EAAA,IAAI;AACF,IAAA,MAAM,EAAE,GAAG,CAAA,EAAG,QAAA,KAAaC,mBAAA,CAAU,IAAA,CAAK,SAAS,IAAA,EAAM,EAAA,EAAI,MAAM,CAAA,EAAG,QAAA,CAAS,YAAY,EAAA,EAAI,aAAa,GAAG,EAAE,IAAA,EAAM,MAAM,CAAA;AAG7H,IAAA,OAAOC,uBAAA,CAAmB;AAAA,MACxB,CAAA,EAAG,KAAK,CAAA,CAAE,QAAA,CAAS,EAAE,CAAA,CAAE,QAAA,CAAS,EAAA,EAAI,GAAG,CAAC,CAAA,CAAA;AAAA,MACxC,CAAA,EAAG,KAAK,CAAA,CAAE,QAAA,CAAS,EAAE,CAAA,CAAE,QAAA,CAAS,EAAA,EAAI,GAAG,CAAC,CAAA,CAAA;AAAA,MACxC,OAAA,EAAS;AAAA,KACV,CAAA;AAAA,EACH,SAAS,GAAA,EAAK;AACZ,IAAA,MAAM,IAAIF,mCAAA;AAAA,MACR,wBAAwB,GAAA,YAAe,KAAA,GAAQ,IAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAC,CAAA;AAAA,KAC1E;AAAA,EACF;AACF;AAEO,SAAS,eAAA,CAAgB,IAAA,EAAc,SAAA,EAAmB,eAAA,EAAkC;AACjG,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,QAAA,CAAS,SAAA,EAAW,EAAA,EAAI,WAAW,CAAA;AAC/C,IAAA,MAAM,OAAA,GAAU,QAAA,CAAS,IAAA,EAAM,EAAA,EAAI,MAAM,CAAA;AAEzC,IAAA,IAAI,MAAA,CAAO,CAAA,EAAA,EAAK,GAAA,CAAI,KAAA,CAAM,EAAA,EAAI,GAAG,CAAC,CAAA,CAAE,CAAA,GAAI,MAAA,EAAQ,OAAO,KAAA;AACvD,IAAA,MAAM,aAAa,MAAA,CAAO,QAAA,CAAS,IAAI,KAAA,CAAM,GAAG,GAAG,EAAE,CAAA;AACrD,IAAA,MAAM,WAAA,GAAc,UAAA,KAAe,CAAA,IAAK,UAAA,KAAe,EAAA,GAAK,IAAI,UAAA,KAAe,CAAA,IAAK,UAAA,KAAe,EAAA,GAAK,CAAA,GAAI,CAAA,CAAA;AAC5G,IAAA,IAAI,WAAA,GAAc,GAAG,OAAO,KAAA;AAC5B,IAAA,MAAM,YAAYC,mBAAA,CAAU,SAAA,CAAU,WAAA,CAAY,GAAA,CAAI,MAAM,CAAA,EAAG,GAAG,CAAC,CAAA,CAChE,eAAe,WAAW,CAAA,CAC1B,iBAAiB,OAAO,CAAA,CACxB,MAAM,KAAK,CAAA;AACd,IAAA,MAAM,SAAA,GAAYE,2BAAA,CAAmB,CAAA,EAAA,EAAK,SAAS,CAAA,CAAE,CAAA;AACrD,IAAA,OAAO,SAAA,CAAU,WAAA,EAAY,KAAM,eAAA,CAAgB,WAAA,EAAY;AAAA,EACjE,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF;;;AC7CO,IAAM,8BAAA,GAAiC;AAG9C,IAAM,sBAAA,GAAyB,mBAAA;AAC/B,IAAM,yBAAA,GAA4B,GAAA;AAGlC,IAAM,yBAAA,GAA4B;AAAA,EAChC,MAAA,EAAQ;AAAA,IACN,EAAE,IAAA,EAAM,UAAA,EAAY,IAAA,EAAM,SAAA,EAAU;AAAA,IACpC,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,OAAA;AAAQ,GACjC;AAAA,EACA,UAAA,EAAY;AAAA,IACV,EAAE,IAAA,EAAM,UAAA,EAAY,IAAA,EAAM,SAAA,EAAU;AAAA,IACpC,EAAE,IAAA,EAAM,WAAA,EAAa,IAAA,EAAM,SAAA,EAAU;AAAA,IACrC,EAAE,IAAA,EAAM,WAAA,EAAa,IAAA,EAAM,SAAA,EAAU;AAAA,IACrC,EAAE,IAAA,EAAM,SAAA,EAAW,IAAA,EAAM,UAAA,EAAW;AAAA,IACpC,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,SAAA;AAAU;AAEpC,CAAA;AASA,SAAS,IAAA,CAAK,GAAuB,CAAA,EAAgC;AACnE,EAAA,OAAO,CAAC,CAAC,CAAA,IAAK,CAAC,CAAC,KAAK,CAAA,CAAE,WAAA,EAAY,KAAM,CAAA,CAAE,WAAA,EAAY;AACzD;AAGA,SAAS,UAAA,CAAW,KAAA,EAAe,KAAA,EAAe,GAAA,EAAsB;AACtE,EAAA,MAAM,IAAA,GAAO,KAAA,CAAM,UAAA,CAAW,IAAI,CAAA,GAAI,KAAA,CAAM,KAAA,CAAM,CAAC,CAAA,CAAE,WAAA,EAAY,GAAI,KAAA,CAAM,WAAA,EAAY;AACvF,EAAA,OAAO,GAAA,KAAQ,MAAA,GAAY,IAAA,CAAK,KAAA,CAAM,KAAA,GAAQ,CAAC,CAAA,GAAI,IAAA,CAAK,KAAA,CAAM,KAAA,GAAQ,CAAA,EAAG,GAAA,GAAM,CAAC,CAAA;AAClF;AAEA,SAAS,UAAA,CAAW,SAAqD,QAAA,EAAkB;AACzF,EAAA,OAAO,OAAA,CAAQ,KAAK,CAAC,CAAA,KAAM,KAAK,CAAA,CAAE,QAAA,EAAU,QAAQ,CAAC,CAAA;AACvD;AAGO,SAAS,wBAAwB,UAAA,EAAuC;AAC7E,EAAA,OAAOC,iCAAe,UAAU,CAAA;AAClC;AAgCA,SAAS,oBAAA,CAAqB,MAAc,MAAA,EAAuB;AACjE,EAAA,MAAM,IAAIC,4CAAA;AAAA,IACR,CAAA,uCAAA,EAA0C,IAAI,CAAA,EAAA,EAAK,MAAM,CAAA,sKAAA;AAAA,GAG3D;AACF;AASO,SAAS,wBACd,SAAA,EACA,QAAA,EACA,iBACA,GAAA,GAAc,IAAA,CAAK,KAAI,EACjB;AACN,EAAA,MAAM,EAAA,GAAK,SAAA;AACX,EAAA,IAAI,EAAA,EAAI,gBAAgB,YAAA,EAAc;AACpC,IAAA,oBAAA,CAAqB,kCAAkC,CAAA,iBAAA,EAAoB,MAAA,CAAO,EAAA,EAAI,WAAW,CAAC,CAAA,EAAA,CAAI,CAAA;AAAA,EACxG;AACA,EAAA,IAAI,CAAC,IAAA,CAAK,EAAA,CAAG,MAAA,EAAQ,iBAAA,EAAmBC,oCAAkB,CAAA,EAAG;AAC3D,IAAA,oBAAA;AAAA,MACE,uDAAA;AAAA,MACA,CAAA,SAAA,EAAYA,oCAAkB,CAAA,MAAA,EAAS,EAAA,CAAG,QAAQ,iBAAiB,CAAA,CAAA;AAAA,KACrE;AAAA,EACF;AACA,EAAA,IAAI,GAAG,MAAA,EAAQ,IAAA,KAAS,0BAA0B,EAAA,CAAG,MAAA,EAAQ,YAAY,yBAAA,EAA2B;AAClG,IAAA,oBAAA;AAAA,MACE,oFAAA;AAAA,MACA,CAAA,eAAA,EAAkB,sBAAsB,CAAA,WAAA,EAAc,yBAAyB,gBACzE,MAAA,CAAO,EAAA,CAAG,MAAA,EAAQ,IAAI,CAAC,CAAA,WAAA,EAAc,MAAA,CAAO,EAAA,CAAG,MAAA,EAAQ,OAAO,CAAC,CAAA,EAAA;AAAA,KACvE;AAAA,EACF;AACA,EAAA,IACE,IAAA,CAAK,UAAU,EAAA,CAAG,KAAA,EAAO,MAAM,CAAA,KAAM,IAAA,CAAK,UAAU,yBAAA,CAA0B,MAAM,KACpF,IAAA,CAAK,SAAA,CAAU,GAAG,KAAA,EAAO,UAAU,MAAM,IAAA,CAAK,SAAA,CAAU,yBAAA,CAA0B,UAAU,CAAA,EAC5F;AACA,IAAA,oBAAA;AAAA,MACE,8EAAA;AAAA,MACA;AAAA,KAEF;AAAA,EACF;AACA,EAAA,MAAM,WAAA,GAAc,MAAA,CAAO,EAAA,CAAG,MAAA,EAAQ,OAAO,CAAA;AAC7C,EAAA,IAAI,CAAC,OAAO,QAAA,CAAS,WAAW,KAAK,CAACC,0CAAA,CAAyB,GAAA,CAAI,WAAW,CAAA,EAAG;AAC/E,IAAA,oBAAA;AAAA,MACE,yEAAA;AAAA,MACA,CAAA,8BAAA,EAAiC,CAAC,GAAGA,0CAAwB,CAAA,CAAE,IAAA,CAAK,IAAI,CAAC,CAAA,iBAAA,EAAoB,MAAA,CAAO,EAAA,CAAG,MAAA,EAAQ,OAAO,CAAC,CAAA,CAAA;AAAA,KACzH;AAAA,EACF;AACA,EAAA,IAAI,WAAA,KAAgB,SAAS,OAAA,EAAS;AACpC,IAAA,oBAAA;AAAA,MACE,iCAAA;AAAA,MACA,kBAAkB,QAAA,CAAS,OAAO,CAAA,iBAAA,EAAoB,EAAA,CAAG,QAAQ,OAAO,CAAA,CAAA;AAAA,KAC1E;AAAA,EACF;AAEA,EAAA,MAAM,UAAA,GAAaC,+CAA6B,eAA0B,CAAA;AAC1E,EAAA,MAAM,SAAA,GAAY,GAAG,OAAA,EAAS,SAAA;AAC9B,EAAA,IAAI,OAAO,SAAA,KAAc,QAAA,IAAY,CAAC,IAAA,CAAK,SAAA,EAAW,UAAU,CAAA,EAAG;AACjE,IAAA,oBAAA;AAAA,MACE,iDAAA;AAAA,MACA,CAAA,mBAAA,EAAsB,UAAU,CAAA,kBAAA,EAAqB,MAAA,CAAO,SAAS,CAAC,CAAA,CAAA;AAAA,KACxE;AAAA,EACF;AACA,EAAA,IAAI,CAAC,IAAA,CAAK,SAAA,EAAW,QAAA,CAAS,eAAe,CAAA,EAAG;AAC9C,IAAA,oBAAA;AAAA,MACE,yDAAA;AAAA,MACA,YAAY,QAAA,CAAS,eAAe,CAAA,kBAAA,EAAqB,MAAA,CAAO,SAAS,CAAC,CAAA,CAAA;AAAA,KAC5E;AAAA,EACF;AACA,EAAA,MAAM,QAAA,GAAW,GAAG,OAAA,EAAS,QAAA;AAC7B,EAAA,IAAI,OAAO,aAAa,QAAA,IAAY,CAAC,KAAK,QAAA,EAAU,QAAA,CAAS,oBAAoB,CAAA,EAAG;AAClF,IAAA,oBAAA;AAAA,MACE,yDAAA;AAAA,MACA,YAAY,QAAA,CAAS,oBAAoB,CAAA,kBAAA,EAAqB,MAAA,CAAO,QAAQ,CAAC,CAAA,CAAA;AAAA,KAChF;AAAA,EACF;AAEA,EAAA,MAAM,SAAA,GAAY,GAAG,OAAA,EAAS,SAAA;AAC9B,EAAA,IAAI,OAAO,SAAA,KAAc,QAAA,IAAY,CAAC,qBAAA,CAAsB,IAAA,CAAK,SAAS,CAAA,EAAG;AAC3E,IAAA,oBAAA,CAAqB,gDAAA,EAAkD,CAAA,IAAA,EAAO,MAAA,CAAO,SAAS,CAAC,CAAA,CAAA,CAAG,CAAA;AAAA,EACpG;AACA,EAAA,IAAI,SAAA,CAAU,WAAA,EAAY,KAAMC,gCAAA,EAAgB;AAC9C,IAAA,oBAAA;AAAA,MACE,6EAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AACA,EAAA,IAAI,CAAC,IAAA,CAAK,SAAA,EAAW,QAAA,CAAS,oBAAoB,CAAA,EAAG;AACnD,IAAA,oBAAA;AAAA,MACE,+CAAA;AAAA,MACA,CAAA,mBAAA,EAAsB,QAAA,CAAS,oBAAoB,CAAA,iBAAA,EAAoB,SAAS,CAAA,CAAA;AAAA,KAClF;AAAA,EACF;AAEA,EAAA,MAAM,OAAA,GAAW,EAAA,CAAG,OAAA,EAAS,OAAA,IAAsE,EAAC;AAKpG,EAAA,IAAI,UAAA,CAAW,OAAA,EAASC,kCAAA,CAAiB,mBAAmB,CAAA,EAAG;AAC7D,IAAA,oBAAA;AAAA,MACE,sEAAA;AAAA,MACA;AAAA,KAEF;AAAA,EACF;AACA,EAAA,MAAM,MAAA,GAAS,UAAA,CAAW,OAAA,EAAS,8BAA8B,CAAA;AACjE,EAAA,IAAI,CAAC,MAAA,EAAQ;AACX,IAAA,oBAAA;AAAA,MACE,yCAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAOA,EAAA,MAAM,QAAQ,CAAA,EAAA,EAAK,UAAA,CAAW,OAAO,KAAA,EAAO,CAAA,EAAG,EAAE,CAAC,CAAA,CAAA;AAClD,EAAA,IAAI,CAAC,IAAA,CAAK,KAAA,EAAO,QAAA,CAAS,YAAY,CAAA,EAAG;AACvC,IAAA,oBAAA,CAAqB,+BAA+B,CAAA,SAAA,EAAY,QAAA,CAAS,YAAY,CAAA,aAAA,EAAgB,KAAK,CAAA,CAAA,CAAG,CAAA;AAAA,EAC/G;AACA,EAAA,MAAM,YAAA,GAAe,OAAO,CAAA,EAAA,EAAK,UAAA,CAAW,OAAO,KAAA,EAAO,EAAA,EAAI,EAAE,CAAC,CAAA,CAAE,CAAA;AACnE,EAAA,IAAI,YAAA,KAAiB,MAAA,CAAO,QAAA,CAAS,kBAAkB,CAAA,EAAG;AACxD,IAAA,oBAAA;AAAA,MACE,kCAAA;AAAA,MACA,YAAY,QAAA,CAAS,kBAAkB,CAAA,mBAAA,EAAsB,YAAA,CAAa,UAAU,CAAA,CAAA;AAAA,KACtF;AAAA,EACF;AACA,EAAA,MAAM,cAAA,GAAiB,MAAA,CAAO,MAAA,CAAO,CAAA,EAAA,EAAK,UAAA,CAAW,MAAA,CAAO,KAAA,EAAO,EAAA,EAAI,EAAE,CAAC,CAAA,CAAE,CAAC,CAAA;AAC7E,EAAA,IAAI,cAAA,KAAmB,SAAS,qBAAA,EAAuB;AACrD,IAAA,oBAAA;AAAA,MACE,qEAAA;AAAA,MACA,CAAA,SAAA,EAAY,QAAA,CAAS,qBAAqB,CAAA,kBAAA,EAAqB,cAAc,CAAA,wHAAA;AAAA,KAE/E;AAAA,EACF;AACA,EAAA,MAAM,SAAA,GAAY,MAAA,CAAO,MAAA,CAAO,CAAA,EAAA,EAAK,UAAA,CAAW,MAAA,CAAO,KAAA,EAAO,EAAA,EAAI,GAAG,CAAC,CAAA,CAAE,CAAC,CAAA;AACzE,EAAA,IAAI,SAAA,KAAc,SAAS,SAAA,EAAW;AACpC,IAAA,oBAAA;AAAA,MACE,kEAAA;AAAA,MACA,CAAA,SAAA,EAAY,QAAA,CAAS,SAAS,CAAA,iBAAA,EAAoB,SAAS,CAAA,CAAA;AAAA,KAC7D;AAAA,EACF;AAEA,EAAA,MAAM,SAAA,GAAY,UAAA,CAAW,OAAA,EAASA,kCAAA,CAAiB,SAAS,CAAA;AAChE,EAAA,IAAI,CAAC,SAAA,EAAW;AACd,IAAA,oBAAA,CAAqB,oBAAoB,8DAA8D,CAAA;AAAA,EACzG;AACA,EAAA,MAAM,eAAA,GAAkB,MAAA,CAAO,MAAA,CAAO,CAAA,EAAA,EAAK,UAAA,CAAW,SAAA,CAAU,KAAA,EAAO,EAAA,EAAI,EAAE,CAAC,CAAA,CAAE,CAAC,CAAA;AACjF,EAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,GAAA,GAAM,GAAI,CAAA;AACpC,EAAA,IAAI,mBAAmB,MAAA,EAAQ;AAC7B,IAAA,oBAAA,CAAqB,wBAAA,EAA0B,CAAA,OAAA,EAAU,eAAe,CAAA,sBAAA,CAAwB,CAAA;AAAA,EAClG;AACA,EAAA,IAAI,eAAA,KAAoB,SAAS,SAAA,EAAW;AAC1C,IAAA,oBAAA;AAAA,MACE,+CAAA;AAAA,MACA,CAAA,SAAA,EAAY,QAAA,CAAS,SAAS,CAAA,iBAAA,EAAoB,eAAe,CAAA,CAAA;AAAA,KACnE;AAAA,EACF;AAEA,EAAA,MAAM,QAAA,GAAW,UAAA,CAAW,OAAA,EAASA,kCAAA,CAAiB,eAAe,CAAA;AACrE,EAAA,IAAI,SAAS,gBAAA,EAAkB;AAC7B,IAAA,IAAI,CAAC,QAAA,EAAU;AACb,MAAA,oBAAA;AAAA,QACE,yBAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AACA,IAAA,MAAM,UAAA,GAAa,OAAO,CAAA,EAAA,EAAK,UAAA,CAAW,SAAS,KAAA,EAAO,CAAA,EAAG,EAAE,CAAC,CAAA,CAAE,CAAA;AAClE,IAAA,IAAI,eAAe,EAAA,EAAI;AACrB,MAAA,oBAAA;AAAA,QACE,uDAAA;AAAA,QACA,CAAA,uBAAA,EAA0B,UAAA,CAAW,QAAA,EAAU,CAAA,CAAA;AAAA,OACjD;AAAA,IACF;AACA,IAAA,MAAM,eAAA,GAAkB,UAAA,CAAW,QAAA,CAAS,KAAA,EAAO,IAAI,EAAE,CAAA;AACzD,IAAA,IAAI,eAAA,CAAgB,MAAM,CAAA,EAAG,EAAE,MAAM,GAAA,CAAI,MAAA,CAAO,EAAE,CAAA,EAAG;AACnD,MAAA,oBAAA,CAAqB,+CAA+C,2CAA2C,CAAA;AAAA,IACjH;AACA,IAAA,MAAM,SAAA,GAAY,CAAA,EAAA,EAAK,eAAA,CAAgB,KAAA,CAAM,EAAE,CAAC,CAAA,CAAA;AAChD,IAAA,IAAI,CAAC,IAAA,CAAK,SAAA,EAAW,QAAA,CAAS,gBAAgB,CAAA,EAAG;AAC/C,MAAA,oBAAA;AAAA,QACE,mDAAA;AAAA,QACA,CAAA,SAAA,EAAY,QAAA,CAAS,gBAAgB,CAAA,iBAAA,EAAoB,SAAS,CAAA,CAAA;AAAA,OACpE;AAAA,IACF;AAAA,EACF,WAAW,QAAA,EAAU;AACnB,IAAA,oBAAA;AAAA,MACE,wDAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AACF;AAGO,SAAS,6BAAA,CACd,SAAA,EACA,QAAA,EACA,eAAA,EACM;AAMN,EAAAC,gDAAA,CAA+B,SAAA,EAAW,UAAU,eAAe,CAAA;AACrE","file":"edge.cjs","sourcesContent":["import { secp256k1 } from '@noble/curves/secp256k1'\nimport { privateKeyToAddress, publicKeyToAddress } from 'viem/accounts'\nimport { serializeSignature, type Hex } from 'viem'\nimport { HavenSigningError } from './types.js'\n\n/**\n * #3173: the three key helpers the edge signer needs, without ethers.\n *\n * `./signer.ts` implements the same three on ethers, and the SDK barrel pulls\n * ethers in for them (and for `provider.ts` / `receipt.ts`). The edge signer\n * already ships viem, and viem signs with `@noble/curves` underneath — these\n * use the same curve library directly, synchronously (viem's own `sign` is\n * async), so `@haven_ai/sdk/edge` stays ethers-free and a signer session stops\n * paying for module init it never uses. Byte-equivalence with the ethers forms\n * is pinned in `edge-signing.test.ts`: same address, same 65-byte `r‖s‖v`\n * serialisation with low-s and v = 27/28, same recovery verdicts, and the same\n * refusals (high-s twin, wrong lengths) — with three stated strict-direction\n * exceptions, see `hexBytes`. Raw ECDSA over the hash — never the EIP-191\n * prefixed digest.\n */\n\n/** secp256k1 order / 2 — a signature with s above this is the malleable twin ethers rejects. */\nconst HALF_N = BigInt('0x7FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF5D576E7357A4501DDFE92F46681B20A0')\n\n/**\n * Stricter than ethers, never looser: the lowercase `0x` prefix and the exact\n * byte length are required. Ethers accepts an uppercase `0X` prefix on a\n * signature and the 64-byte EIP-2098 compact form, and is inconsistent on a\n * private key (`Wallet` accepts unprefixed and refuses `0X`; `SigningKey` does\n * the reverse); every such form is refused here — the divergences are pinned\n * in `edge-signing.test.ts` with ethers control assertions, and every\n * well-formed input is byte-equivalent.\n */\nfunction hexBytes(value: string, bytes: number, what: string): string {\n  if (!/^0x[0-9a-fA-F]+$/.test(value) || value.length !== 2 + bytes * 2) {\n    throw new Error(`${what} must be a 0x-prefixed ${bytes}-byte hex string`)\n  }\n  return value.slice(2)\n}\n\nexport function addressFromKey(privateKey: string): string {\n  try {\n    // Same gate as signHash: a key that derives an address must also sign.\n    return privateKeyToAddress(`0x${hexBytes(privateKey, 32, 'private key')}`)\n  } catch (err) {\n    throw new HavenSigningError(\n      `Invalid private key: ${err instanceof Error ? err.message : String(err)}`,\n    )\n  }\n}\n\nexport function signHash(privateKey: string, hash: string): string {\n  try {\n    const { r, s, recovery } = secp256k1.sign(hexBytes(hash, 32, 'hash'), hexBytes(privateKey, 32, 'private key'), { lowS: true })\n    // viem serialises the trailing byte from yParity (0/1 → 27/28), the same\n    // `v` ethers' `Signature.serialized` writes.\n    return serializeSignature({\n      r: `0x${r.toString(16).padStart(64, '0')}`,\n      s: `0x${s.toString(16).padStart(64, '0')}`,\n      yParity: recovery,\n    })\n  } catch (err) {\n    throw new HavenSigningError(\n      `Failed to sign hash: ${err instanceof Error ? err.message : String(err)}`,\n    )\n  }\n}\n\nexport function verifySignature(hash: string, signature: string, expectedAddress: string): boolean {\n  try {\n    const sig = hexBytes(signature, 65, 'signature')\n    const hashHex = hexBytes(hash, 32, 'hash')\n    // Reject the high-s malleable twin, as ethers does — one signature per message.\n    if (BigInt(`0x${sig.slice(64, 128)}`) > HALF_N) return false\n    const yParityOrV = Number.parseInt(sig.slice(128), 16)\n    const recoveryBit = yParityOrV === 0 || yParityOrV === 27 ? 0 : yParityOrV === 1 || yParityOrV === 28 ? 1 : -1\n    if (recoveryBit < 0) return false\n    const publicKey = secp256k1.Signature.fromCompact(sig.slice(0, 128))\n      .addRecoveryBit(recoveryBit)\n      .recoverPublicKey(hashHex)\n      .toHex(false)\n    const recovered = publicKeyToAddress(`0x${publicKey}`)\n    return recovered.toLowerCase() === expectedAddress.toLowerCase()\n  } catch {\n    return false\n  }\n}\n","/**\n * Sub-budget child guards (#3330) — the SDK-side local verification the\n * signer runs before its delegate key signs a sub-budget child, mirroring\n * `task-budget-guards.ts`'s `assertOwnTaskChild` for the two-row sub-budget\n * tree. ONE verifier covers BOTH rows, because the same signer (the\n * delegating agent A's own key) signs both:\n *\n *  - A's PARENT-CHILD row: `delegate === delegator === A's own account`\n *    (self-delegated, the task-child shape class).\n *  - B's GRANT row: `delegator === A's own account`, `delegate === B's\n *    delegate account` (a real grant to another account).\n *\n * What makes a sub-budget child a sub-budget child (vs a task budget's\n * hard-cap child) is the AMOUNT caveat: an `ERC20PeriodTransferEnforcer`\n * caveat whose terms are `abi.encode(address token, uint256 periodAmount,\n * uint256 periodDuration, uint256 startDate)` — the period-scoped slice of\n * the parent's own period meter, with the parent's periodDuration and\n * startDate reused verbatim. A hard-cap `ERC20TransferAmountEnforcer` caveat\n * is refused: that would be a task budget, which this channel must never\n * sign (two different products, two different sign-context endpoints).\n *\n * Authority, timestamp and recipient-pin checks are byte-for-byte the\n * task-child discipline: authority must equal the declared parent hash and\n * never be ROOT; expiry must be in the future and equal the declared one; a\n * pinned recipient must match exactly, and an unpinned budget must not grow\n * one. Enforcers are the pinned constants from `settlement-child.ts` (no kit\n * dependency) — same reasoning as that file's header documents.\n */\n\nimport { type Address, type Hex } from 'viem'\nimport { HavenTypedDataRefusedError, DIRECT_PAYMENT_CHAIN_IDS } from './direct-payment-guard.js'\nimport { DELEGATION_MANAGER, ROOT_AUTHORITY, CAVEAT_ENFORCERS } from './settlement-child.js'\nimport { deriveDelegateAccountAddress } from './delegate-account.js'\nimport {\n  DELEGATION_TYPEHASH,\n  CAVEAT_TYPEHASH,\n  hashDelegation,\n  type DelegationForHashing,\n} from './task-budget-guards.js'\n\n/** The pinned `ERC20PeriodTransferEnforcer` (bytecode-identical on Base + Base Sepolia). */\nexport const ERC20_PERIOD_TRANSFER_ENFORCER = '0x474e3Ae7E169e940607cC624Da8A15Eb120139aB'\n\n/** The pinned `Delegation` EIP-712 domain (cross-checked by task-budget-guards' pin test). */\nconst DELEGATION_DOMAIN_NAME = 'DelegationManager'\nconst DELEGATION_DOMAIN_VERSION = '1'\n\n/** The pinned `types` shape, byte-identical to `task-budget-guards.ts`'s. */\nconst EXPECTED_DELEGATION_TYPES = {\n  Caveat: [\n    { name: 'enforcer', type: 'address' },\n    { name: 'terms', type: 'bytes' },\n  ],\n  Delegation: [\n    { name: 'delegate', type: 'address' },\n    { name: 'delegator', type: 'address' },\n    { name: 'authority', type: 'bytes32' },\n    { name: 'caveats', type: 'Caveat[]' },\n    { name: 'salt', type: 'uint256' },\n  ],\n} as const\n\nexport interface SubBudgetChildTypedData {\n  domain: { name?: string; version?: string; chainId?: number | string; verifyingContract?: string }\n  types: Record<string, unknown>\n  primaryType: string\n  message: Record<string, unknown>\n}\n\nfunction same(a: string | undefined, b: string | undefined): boolean {\n  return !!a && !!b && a.toLowerCase() === b.toLowerCase()\n}\n\n/** Byte slice [start, end) of a `0x…` string, as lowercase hex without prefix. */\nfunction sliceTerms(terms: string, start: number, end?: number): string {\n  const body = terms.startsWith('0x') ? terms.slice(2).toLowerCase() : terms.toLowerCase()\n  return end === undefined ? body.slice(start * 2) : body.slice(start * 2, end * 2)\n}\n\nfunction findCaveat(caveats: Array<{ enforcer: string; terms: string }>, enforcer: string) {\n  return caveats.find((c) => same(c.enforcer, enforcer))\n}\n\n/** The struct hash of a sub-budget child — the redemption chain's link value. */\nexport function hashSubBudgetDelegation(delegation: DelegationForHashing): Hex {\n  return hashDelegation(delegation)\n}\n\n// The kit's own struct hashes, re-exported verbatim from task-budget-guards'\n// pinned literals so a caller can name them from this module too.\nexport { DELEGATION_TYPEHASH, CAVEAT_TYPEHASH }\n\nexport interface SubBudgetChildExpectation {\n  chainId: number\n  tokenAddress: string\n  /** Per-period amount in atomic units — the child's periodAmount. */\n  periodAmountAtomic: string\n  /** The PARENT's period duration (seconds), reused verbatim in the caveat. */\n  periodDurationSeconds: number\n  /** The PARENT's period anchor, reused verbatim in the caveat. */\n  startDate: number\n  recipientAddress: string | null\n  /** unix seconds — the `TimestampEnforcer`'s `beforeThreshold`. */\n  expiresAt: number\n  /** The hash of the row's parent delegation (`parent_delegation_hash`). */\n  parentDelegationHash: string\n  /**\n   * A's own derived delegate account — the child's `delegator` on BOTH rows.\n   */\n  delegateAccount: string\n  /**\n   * The row's own `delegate`: A's account again for the parent-child row,\n   * B's delegate account for the grant row. Served in the sign-context's\n   * `expected` (read from the stored child JSON, not trusted caller input).\n   */\n  childDelegateAccount: string\n}\n\nfunction refuseSubBudgetChild(what: string, detail: string): never {\n  throw new HavenTypedDataRefusedError(\n    `Refusing to sign the sub-budget child: ${what}. ${detail} ` +\n      'This signature opens a slice of the delegating agent budget for another agent, so it is ' +\n      'verified locally against the expectation Haven declared, rather than trusted.',\n  )\n}\n\n/**\n * Verify a sub-budget child delegation is EXACTLY what\n * `GET /sub-budgets/:id/sign-context` (purpose `open`) declared, that its\n * `delegator` is this signer's own account, and that its `delegate` is the\n * declared child delegate. Throws `HavenTypedDataRefusedError` (never\n * returns) on any disagreement.\n */\nexport function assertOwnSubBudgetChild(\n  typedData: unknown,\n  expected: SubBudgetChildExpectation,\n  delegateAddress: string,\n  now: number = Date.now(),\n): void {\n  const td = typedData as SubBudgetChildTypedData\n  if (td?.primaryType !== 'Delegation') {\n    refuseSubBudgetChild('it is not a Delegation payload', `primaryType was '${String(td?.primaryType)}'.`)\n  }\n  if (!same(td.domain?.verifyingContract, DELEGATION_MANAGER)) {\n    refuseSubBudgetChild(\n      'the EIP-712 domain names an unknown DelegationManager',\n      `Expected ${DELEGATION_MANAGER}, got ${td.domain?.verifyingContract}.`,\n    )\n  }\n  if (td.domain?.name !== DELEGATION_DOMAIN_NAME || td.domain?.version !== DELEGATION_DOMAIN_VERSION) {\n    refuseSubBudgetChild(\n      'the EIP-712 domain name/version does not match the pinned DelegationManager domain',\n      `Expected name '${DELEGATION_DOMAIN_NAME}' version '${DELEGATION_DOMAIN_VERSION}'; got name ` +\n        `'${String(td.domain?.name)}' version '${String(td.domain?.version)}'.`,\n    )\n  }\n  if (\n    JSON.stringify(td.types?.Caveat) !== JSON.stringify(EXPECTED_DELEGATION_TYPES.Caveat) ||\n    JSON.stringify(td.types?.Delegation) !== JSON.stringify(EXPECTED_DELEGATION_TYPES.Delegation)\n  ) {\n    refuseSubBudgetChild(\n      'its EIP-712 type definitions do not match the pinned Delegation/Caveat shape',\n      'A renamed, reordered, or additional field on Delegation or Caveat could change what the ' +\n        'caveats below mean without changing this check\\'s field-by-field comparisons.',\n    )\n  }\n  const domainChain = Number(td.domain?.chainId)\n  if (!Number.isFinite(domainChain) || !DIRECT_PAYMENT_CHAIN_IDS.has(domainChain)) {\n    refuseSubBudgetChild(\n      'it is scoped to a chain the delegation rail has no pinned contracts for',\n      `Chains with pinned contracts: ${[...DIRECT_PAYMENT_CHAIN_IDS].join(', ')}; the child says ${String(td.domain?.chainId)}.`,\n    )\n  }\n  if (domainChain !== expected.chainId) {\n    refuseSubBudgetChild(\n      'it is scoped to the wrong chain',\n      `Expected chain ${expected.chainId}; the child says ${td.domain?.chainId}.`,\n    )\n  }\n\n  const ownAccount = deriveDelegateAccountAddress(delegateAddress as Address)\n  const delegator = td.message?.delegator\n  if (typeof delegator !== 'string' || !same(delegator, ownAccount)) {\n    refuseSubBudgetChild(\n      \"it is not delegated by this agent's own account\",\n      `Expected delegator ${ownAccount}; the child names ${String(delegator)}.`,\n    )\n  }\n  if (!same(delegator, expected.delegateAccount)) {\n    refuseSubBudgetChild(\n      'its delegator does not match the account Haven declared',\n      `Expected ${expected.delegateAccount}; the child names ${String(delegator)}.`,\n    )\n  }\n  const delegate = td.message?.delegate\n  if (typeof delegate !== 'string' || !same(delegate, expected.childDelegateAccount)) {\n    refuseSubBudgetChild(\n      'its delegate does not match the declared child delegate',\n      `Expected ${expected.childDelegateAccount}; the child names ${String(delegate)}.`,\n    )\n  }\n\n  const authority = td.message?.authority\n  if (typeof authority !== 'string' || !/^0x[0-9a-fA-F]{64}$/.test(authority)) {\n    refuseSubBudgetChild('its authority is not a 32-byte delegation hash', `Got ${String(authority)}.`)\n  }\n  if (authority.toLowerCase() === ROOT_AUTHORITY) {\n    refuseSubBudgetChild(\n      'it is a ROOT delegation, not a re-delegation of the delegating agent budget',\n      'A sub-budget always chains under the delegating agent budget delegation.',\n    )\n  }\n  if (!same(authority, expected.parentDelegationHash)) {\n    refuseSubBudgetChild(\n      'it chains under a different parent delegation',\n      `Expected authority ${expected.parentDelegationHash}; the child says ${authority}.`,\n    )\n  }\n\n  const caveats = (td.message?.caveats as Array<{ enforcer: string; terms: string }> | undefined) ?? []\n\n  // The PERIOD caveat is what makes this a sub-budget — a hard-cap\n  // `ERC20TransferAmountEnforcer` caveat is the task-budget shape and is\n  // refused on this channel.\n  if (findCaveat(caveats, CAVEAT_ENFORCERS.erc20TransferAmount)) {\n    refuseSubBudgetChild(\n      'it carries a hard-cap transfer-amount caveat (the task-budget shape)',\n      'A sub-budget is period-scoped: its amount caveat must be an ERC20PeriodTransferEnforcer ' +\n        'caveat slicing the parent period meter, never a lifetime cap.',\n    )\n  }\n  const period = findCaveat(caveats, ERC20_PERIOD_TRANSFER_ENFORCER)\n  if (!period) {\n    refuseSubBudgetChild(\n      'it has no ERC-20 period-transfer caveat',\n      'Without it the child is not bounded to a per-period amount.',\n    )\n  }\n  // terms = abi.encodePacked(address token, uint256 periodAmount,\n  // uint256 periodDuration, uint256 startDate) — the kit's TIGHT packing\n  // (20 + 32×3 = 116 bytes, verified against `createDelegation`'s own\n  // output), the same layout `task-budget-guards.ts` decodes for the\n  // ERC20TransferAmountEnforcer. NOT head/tail-padded words: the address\n  // occupies bytes [0,20) and the amount starts at byte 20.\n  const token = `0x${sliceTerms(period.terms, 0, 20)}`\n  if (!same(token, expected.tokenAddress)) {\n    refuseSubBudgetChild('it spends a different token', `Expected ${expected.tokenAddress}, child pins ${token}.`)\n  }\n  const periodAmount = BigInt(`0x${sliceTerms(period.terms, 20, 52)}`)\n  if (periodAmount !== BigInt(expected.periodAmountAtomic)) {\n    refuseSubBudgetChild(\n      'the period amount does not match',\n      `Expected ${expected.periodAmountAtomic}; the child allows ${periodAmount.toString()}.`,\n    )\n  }\n  const periodDuration = Number(BigInt(`0x${sliceTerms(period.terms, 52, 84)}`))\n  if (periodDuration !== expected.periodDurationSeconds) {\n    refuseSubBudgetChild(\n      'its period duration does not match the parent window Haven declared',\n      `Expected ${expected.periodDurationSeconds}s; the child says ${periodDuration}s. A sub-budget is a ` +\n        'slice of the parent period meter — same window, smaller amount — never a different clock.',\n    )\n  }\n  const startDate = Number(BigInt(`0x${sliceTerms(period.terms, 84, 116)}`))\n  if (startDate !== expected.startDate) {\n    refuseSubBudgetChild(\n      'its period start does not match the parent anchor Haven declared',\n      `Expected ${expected.startDate}; the child says ${startDate}.`,\n    )\n  }\n\n  const timestamp = findCaveat(caveats, CAVEAT_ENFORCERS.timestamp)\n  if (!timestamp) {\n    refuseSubBudgetChild('it never expires', 'A sub-budget child without a timestamp caveat is open-ended.')\n  }\n  const beforeThreshold = Number(BigInt(`0x${sliceTerms(timestamp.terms, 16, 32)}`))\n  const nowSec = Math.floor(now / 1000)\n  if (beforeThreshold <= nowSec) {\n    refuseSubBudgetChild('it has already expired', `Expiry ${beforeThreshold} is not in the future.`)\n  }\n  if (beforeThreshold !== expected.expiresAt) {\n    refuseSubBudgetChild(\n      'its expiry does not match what Haven declared',\n      `Expected ${expected.expiresAt}; the child says ${beforeThreshold}.`,\n    )\n  }\n\n  const calldata = findCaveat(caveats, CAVEAT_ENFORCERS.allowedCalldata)\n  if (expected.recipientAddress) {\n    if (!calldata) {\n      refuseSubBudgetChild(\n        'it has no recipient pin',\n        'The sub-budget was issued with a pinned recipient, so the child must carry one.',\n      )\n    }\n    const startIndex = BigInt(`0x${sliceTerms(calldata.terms, 0, 32)}`)\n    if (startIndex !== 4n) {\n      refuseSubBudgetChild(\n        'the recipient pin points at the wrong calldata offset',\n        `Expected offset 4, got ${startIndex.toString()}.`,\n      )\n    }\n    const paddedRecipient = sliceTerms(calldata.terms, 32, 64)\n    if (paddedRecipient.slice(0, 24) !== '0'.repeat(24)) {\n      refuseSubBudgetChild('the pinned recipient is not a plain address', 'Its 32-byte word is not a padded address.')\n    }\n    const recipient = `0x${paddedRecipient.slice(24)}`\n    if (!same(recipient, expected.recipientAddress)) {\n      refuseSubBudgetChild(\n        'it pins a different recipient than Haven declared',\n        `Expected ${expected.recipientAddress}; the child pins ${recipient}.`,\n      )\n    }\n  } else if (calldata) {\n    refuseSubBudgetChild(\n      'it pins a recipient the sub-budget was not issued with',\n      'This sub-budget is open (no recipient pin); the child must not add one.',\n    )\n  }\n}\n\n/** Close UserOp verification — byte-for-byte the task-budget discipline. */\nexport function assertOwnSubBudgetCloseUserOp(\n  typedData: Record<string, unknown>,\n  expected: { delegationHash: string },\n  delegateAddress: string,\n): void {\n  // The close UserOp shape is identical to the task budget's: a\n  // disableDelegation(child) call from the agent's own delegate account.\n  // Reuse the task-budget verifier — the only expectation that differs is\n  // the delegation hash, which is an input here either way. Static import,\n  // not lazy: these modules share no init-time cycle.\n  assertOwnTaskBudgetCloseUserOp(typedData, expected, delegateAddress)\n}\n\n// The close-UserOp verifier is imported for the re-export above.\nimport { assertOwnTaskBudgetCloseUserOp } from './task-budget-guards.js'\n"]}