@haven_ai/sdk 0.5.0-alpha.1 → 0.7.0-alpha.0

package/dist/edge.d.cts

@@ -1,4 +1,5 @@
-export { M as AgentPaymentFailureCode, Q as AgentPaymentNextAction, b_ as CAVEAT_ENFORCERS, b$ as DELEGATION_MANAGER, c0 as DIRECT_PAYMENT_CHAIN_IDS, a7 as DIRECT_SIGN_CONTEXT_VERSION, a8 as ENTRY_POINT_V07, c1 as EXECUTE_ABI, aa as HAVEN_CLIENT_HEADER, ab as HAVEN_CONNECTOR_CHANNEL, ac as HAVEN_MINIMUM_NODE_VERSION, c2 as HYBRID_DELEGATOR_IMPLEMENTATION, ai as HavenApiError, a as HavenClientUpdate, E as HavenError, am as HavenSigningError, ao as HavenTypedDataRefusedError, ap as HavenUnsupportedSignerVersionError, aq as HavenUserOpBindingError, c3 as MAX_SETTLEMENT_WINDOW_SECONDS, aw as NextStep, ay as NextStepHandoff, aA as NextStepTarget, aI as ROOT_AUTHORITY, aL as SIGNER_UPDATE_FALLBACK, c4 as SIMPLE_FACTORY_ADDRESS, aQ as SettlementChildExpectation, c5 as SettlementChildTypedData, aR as SignerRefusalCode, j as SweepAuthorization, aV as SweepExpectedAuth, a_ as TYPED_DATA_NOT_ALLOWED, b1 as X402ExpectedAuth, b5 as X402PaymentOption, X as X402PaymentRequired, bg as assertBoundDirectPaymentUserOp, c6 as assertFundingLegPaysDelegate, c7 as assertOwnSettlementChild, bh as assertUserOpTypedDataBinding, bi as buildSweepAuthorizationMessage, bj as buildSweepTypedData, bk as buildX402ExpectedMessage, c8 as chainIdForNetwork, bm as connectorRerunCommand, bo as createNextStepBuilder, bp as decodeBase64Json, bs as deriveDelegateAccountAddress, bt as encodeBase64Json, bw as havenClientIdentity, bz as isPackedUserOperationTypedData, c9 as isSettlementChildTypedData, bA as isSupportedNodeVersion, bD as packedUserOperationHash, bH as readClientUpdate, bN as selectStandardPaymentOption, bS as toStandardPaymentRequirements, bT as unsupportedNodeVersionMessage, bV as verifySettlementChild, bX as x402AuthorizationAmount, bZ as x402V2PaymentEnvelope } from './base64-BUMXmruY.cjs';
+import { cg as DelegationForHashing } from './base64-_seD1uw8.cjs';
+export { U as AgentPaymentFailureCode, Y as AgentPaymentNextAction, ch as CAVEAT_ENFORCERS, ci as CAVEAT_TYPEHASH, cj as DELEGATION_MANAGER, ck as DELEGATION_TYPEHASH, cl as DIRECT_PAYMENT_CHAIN_IDS, ac as DIRECT_SIGN_CONTEXT_VERSION, ad as ENTRY_POINT_V07, cm as EXECUTE_ABI, af as HAVEN_CLIENT_HEADER, ag as HAVEN_CONNECTOR_CHANNEL, ah as HAVEN_MINIMUM_NODE_VERSION, cn as HYBRID_DELEGATOR_IMPLEMENTATION, an as HavenApiError, a as HavenClientUpdate, I as HavenError, ar as HavenSigningError, at as HavenTypedDataRefusedError, au as HavenUnsupportedSignerVersionError, av as HavenUserOpBindingError, co as MAX_SETTLEMENT_WINDOW_SECONDS, ax as MAX_TASK_BUDGET_TTL_SECONDS, aC as NextStep, aE as NextStepHandoff, aG as NextStepTarget, aO as ROOT_AUTHORITY, aR as SIGNER_UPDATE_FALLBACK, cp as SIMPLE_FACTORY_ADDRESS, aW as SettlementChildExpectation, cq as SettlementChildTypedData, aX as SignerRefusalCode, j as SweepAuthorization, a$ as SweepExpectedAuth, b3 as TASK_SIGN_CONTEXT_VERSION, b5 as TYPED_DATA_NOT_ALLOWED, b6 as TaskBudgetCloseExpectation, b7 as TaskChildExpectation, b8 as TaskChildTypedData, bc as X402ExpectedAuth, bg as X402PaymentOption, X as X402PaymentRequired, bs as assertBoundDirectPaymentUserOp, cr as assertFundingLegPaysDelegate, cs as assertOwnSettlementChild, bt as assertOwnTaskBudgetCloseUserOp, bu as assertOwnTaskChild, bv as assertUserOpTypedDataBinding, bw as buildSweepAuthorizationMessage, bx as buildSweepTypedData, by as buildX402ExpectedMessage, ct as chainIdForNetwork, bA as connectorRerunCommand, bC as connectorUpgradeCommand, bD as createNextStepBuilder, bE as decodeBase64Json, bH as deriveDelegateAccountAddress, bI as encodeBase64Json, bL as hashDelegation, bM as havenClientIdentity, bP as isPackedUserOperationTypedData, cu as isSettlementChildTypedData, bQ as isSupportedNodeVersion, bS as isTaskChildTypedData, bU as packedUserOperationHash, bY as readClientUpdate, c3 as selectStandardPaymentOption, c8 as toStandardPaymentRequirements, c9 as unsupportedNodeVersionMessage, cb as verifySettlementChild, cd as x402AuthorizationAmount, cf as x402V2PaymentEnvelope } from './base64-_seD1uw8.cjs';
 import { Hex, Address } from 'viem';
 import 'x402/types';
 
@@ -36,6 +37,37 @@ declare function verifySignature(hash: string, signature: string, expectedAddres
  * `@metamask/delegation-abis`' `IDelegationManager` ABI (a devDependency
  * only, in `@haven_ai/signer`'s `package.json`) and pinned against the kit's
  * own encoder by `packages/signer/src/redemption-guard.pins.test.ts`.
+ *
+ * TASK BUDGETS (#3329) widen the accepted chain from exactly one link to ONE
+ * OR TWO: `[budget]` (unchanged) or `[task child, budget]` — leaf first, as
+ * everywhere else in this file. The two-link case is safe by the SAME
+ * reasoning as the one-link case, extended one hop: the task child's own
+ * `delegate` AND `delegator` are this signer's OWN account (a
+ * SELF-delegation — `assertOwnTaskChild` in `task-budget-guards.ts` is what
+ * proves its caveats narrow, never widen, the budget it chains under), and
+ * the budget link underneath it keeps the existing (3)/(4) shape: delegate ==
+ * own account, delegator != own account (a real grant from elsewhere). A
+ * chain redeemed this way can therefore only ever be AS OR MORE restrictive
+ * than redeeming the budget directly — the task child ADDS caveats (amount,
+ * recipient, expiry); it can never remove one, because
+ * `DelegationManager.redeemDelegations` ANDs every caveat of every link in
+ * the chain (the same AND-only property `settlement-child.ts`'s header
+ * documents). Any OTHER two-link chain — a leaf delegated by a third party, a
+ * leaf whose delegate is not this signer's own account, a chain longer than
+ * two — is refused exactly as before.
+ *
+ * SUB-BUDGETS (#3330) widen it once more, to exactly ONE, TWO or THREE
+ * links: `[sub grant, sub parent-child, budget]` is the third shape. The
+ * signer here is agent B's signer (B redeems its own grant), so the leaf's
+ * `delegate` is this signer's own account and its `delegator` is agent A's
+ * account — a REAL grant from another account, not a self-delegation. The
+ * middle link is A's parent-child (delegate == A's account, delegator == A's
+ * account: A's SELF-narrowing, the task-child shape class), and the root
+ * keeps the one-link shape (delegate == A's account, delegator != A). The
+ * AND-only property again makes the three-link chain AS OR MORE restrictive
+ * than the two-hop task chain; a chain longer than three, a leaf whose
+ * delegate is not this signer, or a middle link that is not a self-delegation
+ * is refused exactly as before.
  */
 
 /** `Delegation` — `(address delegate, address delegator, bytes32 authority, Caveat[] caveats, uint256 salt, bytes signature)`. */
@@ -95,11 +127,96 @@ declare const REDEEM_DELEGATIONS_ABI: readonly [{
 declare const SINGLE_DEFAULT_MODE: Hex;
 /**
  * Verify `redeemCalldata` (the bytes passed to `execute()`, selector already
- * confirmed to be `redeemDelegations` by the caller) is EXACTLY Haven's own
- * shape: one delegation, redeemed by `ownAccount`, granted by someone else,
- * in `SingleDefault` mode, with no encoding slack anywhere. Throws
+ * confirmed to be `redeemDelegations` by the caller) is EXACTLY one of Haven's
+ * two shapes: a single delegation redeemed by `ownAccount` and granted by
+ * someone else, or (#3329) that grant behind one task-budget child `ownAccount`
+ * delegated to itself; in `SingleDefault` mode, with no encoding slack
+ * anywhere. Throws
  * `HavenSigningError` (never returns) on any disagreement.
  */
 declare function assertRedeemsOwnBudgetDelegation(redeemCalldata: Hex, ownAccount: Address): void;
 
-export { DELEGATION_TUPLE_COMPONENTS, REDEEM_DELEGATIONS_ABI, SINGLE_DEFAULT_MODE, addressFromKey, assertRedeemsOwnBudgetDelegation, signHash, verifySignature };
+/**
+ * Sub-budget child guards (#3330) — the SDK-side local verification the
+ * signer runs before its delegate key signs a sub-budget child, mirroring
+ * `task-budget-guards.ts`'s `assertOwnTaskChild` for the two-row sub-budget
+ * tree. ONE verifier covers BOTH rows, because the same signer (the
+ * delegating agent A's own key) signs both:
+ *
+ *  - A's PARENT-CHILD row: `delegate === delegator === A's own account`
+ *    (self-delegated, the task-child shape class).
+ *  - B's GRANT row: `delegator === A's own account`, `delegate === B's
+ *    delegate account` (a real grant to another account).
+ *
+ * What makes a sub-budget child a sub-budget child (vs a task budget's
+ * hard-cap child) is the AMOUNT caveat: an `ERC20PeriodTransferEnforcer`
+ * caveat whose terms are `abi.encode(address token, uint256 periodAmount,
+ * uint256 periodDuration, uint256 startDate)` — the period-scoped slice of
+ * the parent's own period meter, with the parent's periodDuration and
+ * startDate reused verbatim. A hard-cap `ERC20TransferAmountEnforcer` caveat
+ * is refused: that would be a task budget, which this channel must never
+ * sign (two different products, two different sign-context endpoints).
+ *
+ * Authority, timestamp and recipient-pin checks are byte-for-byte the
+ * task-child discipline: authority must equal the declared parent hash and
+ * never be ROOT; expiry must be in the future and equal the declared one; a
+ * pinned recipient must match exactly, and an unpinned budget must not grow
+ * one. Enforcers are the pinned constants from `settlement-child.ts` (no kit
+ * dependency) — same reasoning as that file's header documents.
+ */
+
+/** The pinned `ERC20PeriodTransferEnforcer` (bytecode-identical on Base + Base Sepolia). */
+declare const ERC20_PERIOD_TRANSFER_ENFORCER = "0x474e3Ae7E169e940607cC624Da8A15Eb120139aB";
+interface SubBudgetChildTypedData {
+    domain: {
+        name?: string;
+        version?: string;
+        chainId?: number | string;
+        verifyingContract?: string;
+    };
+    types: Record<string, unknown>;
+    primaryType: string;
+    message: Record<string, unknown>;
+}
+/** The struct hash of a sub-budget child — the redemption chain's link value. */
+declare function hashSubBudgetDelegation(delegation: DelegationForHashing): Hex;
+
+interface SubBudgetChildExpectation {
+    chainId: number;
+    tokenAddress: string;
+    /** Per-period amount in atomic units — the child's periodAmount. */
+    periodAmountAtomic: string;
+    /** The PARENT's period duration (seconds), reused verbatim in the caveat. */
+    periodDurationSeconds: number;
+    /** The PARENT's period anchor, reused verbatim in the caveat. */
+    startDate: number;
+    recipientAddress: string | null;
+    /** unix seconds — the `TimestampEnforcer`'s `beforeThreshold`. */
+    expiresAt: number;
+    /** The hash of the row's parent delegation (`parent_delegation_hash`). */
+    parentDelegationHash: string;
+    /**
+     * A's own derived delegate account — the child's `delegator` on BOTH rows.
+     */
+    delegateAccount: string;
+    /**
+     * The row's own `delegate`: A's account again for the parent-child row,
+     * B's delegate account for the grant row. Served in the sign-context's
+     * `expected` (read from the stored child JSON, not trusted caller input).
+     */
+    childDelegateAccount: string;
+}
+/**
+ * Verify a sub-budget child delegation is EXACTLY what
+ * `GET /sub-budgets/:id/sign-context` (purpose `open`) declared, that its
+ * `delegator` is this signer's own account, and that its `delegate` is the
+ * declared child delegate. Throws `HavenTypedDataRefusedError` (never
+ * returns) on any disagreement.
+ */
+declare function assertOwnSubBudgetChild(typedData: unknown, expected: SubBudgetChildExpectation, delegateAddress: string, now?: number): void;
+/** Close UserOp verification — byte-for-byte the task-budget discipline. */
+declare function assertOwnSubBudgetCloseUserOp(typedData: Record<string, unknown>, expected: {
+    delegationHash: string;
+}, delegateAddress: string): void;
+
+export { DELEGATION_TUPLE_COMPONENTS, DelegationForHashing, ERC20_PERIOD_TRANSFER_ENFORCER, REDEEM_DELEGATIONS_ABI, SINGLE_DEFAULT_MODE, type SubBudgetChildExpectation, type SubBudgetChildTypedData, addressFromKey, assertOwnSubBudgetChild, assertOwnSubBudgetCloseUserOp, assertRedeemsOwnBudgetDelegation, hashSubBudgetDelegation, signHash, verifySignature };

package/dist/edge.d.ts

@@ -1,4 +1,5 @@
-export { M as AgentPaymentFailureCode, Q as AgentPaymentNextAction, b_ as CAVEAT_ENFORCERS, b$ as DELEGATION_MANAGER, c0 as DIRECT_PAYMENT_CHAIN_IDS, a7 as DIRECT_SIGN_CONTEXT_VERSION, a8 as ENTRY_POINT_V07, c1 as EXECUTE_ABI, aa as HAVEN_CLIENT_HEADER, ab as HAVEN_CONNECTOR_CHANNEL, ac as HAVEN_MINIMUM_NODE_VERSION, c2 as HYBRID_DELEGATOR_IMPLEMENTATION, ai as HavenApiError, a as HavenClientUpdate, E as HavenError, am as HavenSigningError, ao as HavenTypedDataRefusedError, ap as HavenUnsupportedSignerVersionError, aq as HavenUserOpBindingError, c3 as MAX_SETTLEMENT_WINDOW_SECONDS, aw as NextStep, ay as NextStepHandoff, aA as NextStepTarget, aI as ROOT_AUTHORITY, aL as SIGNER_UPDATE_FALLBACK, c4 as SIMPLE_FACTORY_ADDRESS, aQ as SettlementChildExpectation, c5 as SettlementChildTypedData, aR as SignerRefusalCode, j as SweepAuthorization, aV as SweepExpectedAuth, a_ as TYPED_DATA_NOT_ALLOWED, b1 as X402ExpectedAuth, b5 as X402PaymentOption, X as X402PaymentRequired, bg as assertBoundDirectPaymentUserOp, c6 as assertFundingLegPaysDelegate, c7 as assertOwnSettlementChild, bh as assertUserOpTypedDataBinding, bi as buildSweepAuthorizationMessage, bj as buildSweepTypedData, bk as buildX402ExpectedMessage, c8 as chainIdForNetwork, bm as connectorRerunCommand, bo as createNextStepBuilder, bp as decodeBase64Json, bs as deriveDelegateAccountAddress, bt as encodeBase64Json, bw as havenClientIdentity, bz as isPackedUserOperationTypedData, c9 as isSettlementChildTypedData, bA as isSupportedNodeVersion, bD as packedUserOperationHash, bH as readClientUpdate, bN as selectStandardPaymentOption, bS as toStandardPaymentRequirements, bT as unsupportedNodeVersionMessage, bV as verifySettlementChild, bX as x402AuthorizationAmount, bZ as x402V2PaymentEnvelope } from './base64-BUMXmruY.js';
+import { cg as DelegationForHashing } from './base64-_seD1uw8.js';
+export { U as AgentPaymentFailureCode, Y as AgentPaymentNextAction, ch as CAVEAT_ENFORCERS, ci as CAVEAT_TYPEHASH, cj as DELEGATION_MANAGER, ck as DELEGATION_TYPEHASH, cl as DIRECT_PAYMENT_CHAIN_IDS, ac as DIRECT_SIGN_CONTEXT_VERSION, ad as ENTRY_POINT_V07, cm as EXECUTE_ABI, af as HAVEN_CLIENT_HEADER, ag as HAVEN_CONNECTOR_CHANNEL, ah as HAVEN_MINIMUM_NODE_VERSION, cn as HYBRID_DELEGATOR_IMPLEMENTATION, an as HavenApiError, a as HavenClientUpdate, I as HavenError, ar as HavenSigningError, at as HavenTypedDataRefusedError, au as HavenUnsupportedSignerVersionError, av as HavenUserOpBindingError, co as MAX_SETTLEMENT_WINDOW_SECONDS, ax as MAX_TASK_BUDGET_TTL_SECONDS, aC as NextStep, aE as NextStepHandoff, aG as NextStepTarget, aO as ROOT_AUTHORITY, aR as SIGNER_UPDATE_FALLBACK, cp as SIMPLE_FACTORY_ADDRESS, aW as SettlementChildExpectation, cq as SettlementChildTypedData, aX as SignerRefusalCode, j as SweepAuthorization, a$ as SweepExpectedAuth, b3 as TASK_SIGN_CONTEXT_VERSION, b5 as TYPED_DATA_NOT_ALLOWED, b6 as TaskBudgetCloseExpectation, b7 as TaskChildExpectation, b8 as TaskChildTypedData, bc as X402ExpectedAuth, bg as X402PaymentOption, X as X402PaymentRequired, bs as assertBoundDirectPaymentUserOp, cr as assertFundingLegPaysDelegate, cs as assertOwnSettlementChild, bt as assertOwnTaskBudgetCloseUserOp, bu as assertOwnTaskChild, bv as assertUserOpTypedDataBinding, bw as buildSweepAuthorizationMessage, bx as buildSweepTypedData, by as buildX402ExpectedMessage, ct as chainIdForNetwork, bA as connectorRerunCommand, bC as connectorUpgradeCommand, bD as createNextStepBuilder, bE as decodeBase64Json, bH as deriveDelegateAccountAddress, bI as encodeBase64Json, bL as hashDelegation, bM as havenClientIdentity, bP as isPackedUserOperationTypedData, cu as isSettlementChildTypedData, bQ as isSupportedNodeVersion, bS as isTaskChildTypedData, bU as packedUserOperationHash, bY as readClientUpdate, c3 as selectStandardPaymentOption, c8 as toStandardPaymentRequirements, c9 as unsupportedNodeVersionMessage, cb as verifySettlementChild, cd as x402AuthorizationAmount, cf as x402V2PaymentEnvelope } from './base64-_seD1uw8.js';
 import { Hex, Address } from 'viem';
 import 'x402/types';
 
@@ -36,6 +37,37 @@ declare function verifySignature(hash: string, signature: string, expectedAddres
  * `@metamask/delegation-abis`' `IDelegationManager` ABI (a devDependency
  * only, in `@haven_ai/signer`'s `package.json`) and pinned against the kit's
  * own encoder by `packages/signer/src/redemption-guard.pins.test.ts`.
+ *
+ * TASK BUDGETS (#3329) widen the accepted chain from exactly one link to ONE
+ * OR TWO: `[budget]` (unchanged) or `[task child, budget]` — leaf first, as
+ * everywhere else in this file. The two-link case is safe by the SAME
+ * reasoning as the one-link case, extended one hop: the task child's own
+ * `delegate` AND `delegator` are this signer's OWN account (a
+ * SELF-delegation — `assertOwnTaskChild` in `task-budget-guards.ts` is what
+ * proves its caveats narrow, never widen, the budget it chains under), and
+ * the budget link underneath it keeps the existing (3)/(4) shape: delegate ==
+ * own account, delegator != own account (a real grant from elsewhere). A
+ * chain redeemed this way can therefore only ever be AS OR MORE restrictive
+ * than redeeming the budget directly — the task child ADDS caveats (amount,
+ * recipient, expiry); it can never remove one, because
+ * `DelegationManager.redeemDelegations` ANDs every caveat of every link in
+ * the chain (the same AND-only property `settlement-child.ts`'s header
+ * documents). Any OTHER two-link chain — a leaf delegated by a third party, a
+ * leaf whose delegate is not this signer's own account, a chain longer than
+ * two — is refused exactly as before.
+ *
+ * SUB-BUDGETS (#3330) widen it once more, to exactly ONE, TWO or THREE
+ * links: `[sub grant, sub parent-child, budget]` is the third shape. The
+ * signer here is agent B's signer (B redeems its own grant), so the leaf's
+ * `delegate` is this signer's own account and its `delegator` is agent A's
+ * account — a REAL grant from another account, not a self-delegation. The
+ * middle link is A's parent-child (delegate == A's account, delegator == A's
+ * account: A's SELF-narrowing, the task-child shape class), and the root
+ * keeps the one-link shape (delegate == A's account, delegator != A). The
+ * AND-only property again makes the three-link chain AS OR MORE restrictive
+ * than the two-hop task chain; a chain longer than three, a leaf whose
+ * delegate is not this signer, or a middle link that is not a self-delegation
+ * is refused exactly as before.
  */
 
 /** `Delegation` — `(address delegate, address delegator, bytes32 authority, Caveat[] caveats, uint256 salt, bytes signature)`. */
@@ -95,11 +127,96 @@ declare const REDEEM_DELEGATIONS_ABI: readonly [{
 declare const SINGLE_DEFAULT_MODE: Hex;
 /**
  * Verify `redeemCalldata` (the bytes passed to `execute()`, selector already
- * confirmed to be `redeemDelegations` by the caller) is EXACTLY Haven's own
- * shape: one delegation, redeemed by `ownAccount`, granted by someone else,
- * in `SingleDefault` mode, with no encoding slack anywhere. Throws
+ * confirmed to be `redeemDelegations` by the caller) is EXACTLY one of Haven's
+ * two shapes: a single delegation redeemed by `ownAccount` and granted by
+ * someone else, or (#3329) that grant behind one task-budget child `ownAccount`
+ * delegated to itself; in `SingleDefault` mode, with no encoding slack
+ * anywhere. Throws
  * `HavenSigningError` (never returns) on any disagreement.
  */
 declare function assertRedeemsOwnBudgetDelegation(redeemCalldata: Hex, ownAccount: Address): void;
 
-export { DELEGATION_TUPLE_COMPONENTS, REDEEM_DELEGATIONS_ABI, SINGLE_DEFAULT_MODE, addressFromKey, assertRedeemsOwnBudgetDelegation, signHash, verifySignature };
+/**
+ * Sub-budget child guards (#3330) — the SDK-side local verification the
+ * signer runs before its delegate key signs a sub-budget child, mirroring
+ * `task-budget-guards.ts`'s `assertOwnTaskChild` for the two-row sub-budget
+ * tree. ONE verifier covers BOTH rows, because the same signer (the
+ * delegating agent A's own key) signs both:
+ *
+ *  - A's PARENT-CHILD row: `delegate === delegator === A's own account`
+ *    (self-delegated, the task-child shape class).
+ *  - B's GRANT row: `delegator === A's own account`, `delegate === B's
+ *    delegate account` (a real grant to another account).
+ *
+ * What makes a sub-budget child a sub-budget child (vs a task budget's
+ * hard-cap child) is the AMOUNT caveat: an `ERC20PeriodTransferEnforcer`
+ * caveat whose terms are `abi.encode(address token, uint256 periodAmount,
+ * uint256 periodDuration, uint256 startDate)` — the period-scoped slice of
+ * the parent's own period meter, with the parent's periodDuration and
+ * startDate reused verbatim. A hard-cap `ERC20TransferAmountEnforcer` caveat
+ * is refused: that would be a task budget, which this channel must never
+ * sign (two different products, two different sign-context endpoints).
+ *
+ * Authority, timestamp and recipient-pin checks are byte-for-byte the
+ * task-child discipline: authority must equal the declared parent hash and
+ * never be ROOT; expiry must be in the future and equal the declared one; a
+ * pinned recipient must match exactly, and an unpinned budget must not grow
+ * one. Enforcers are the pinned constants from `settlement-child.ts` (no kit
+ * dependency) — same reasoning as that file's header documents.
+ */
+
+/** The pinned `ERC20PeriodTransferEnforcer` (bytecode-identical on Base + Base Sepolia). */
+declare const ERC20_PERIOD_TRANSFER_ENFORCER = "0x474e3Ae7E169e940607cC624Da8A15Eb120139aB";
+interface SubBudgetChildTypedData {
+    domain: {
+        name?: string;
+        version?: string;
+        chainId?: number | string;
+        verifyingContract?: string;
+    };
+    types: Record<string, unknown>;
+    primaryType: string;
+    message: Record<string, unknown>;
+}
+/** The struct hash of a sub-budget child — the redemption chain's link value. */
+declare function hashSubBudgetDelegation(delegation: DelegationForHashing): Hex;
+
+interface SubBudgetChildExpectation {
+    chainId: number;
+    tokenAddress: string;
+    /** Per-period amount in atomic units — the child's periodAmount. */
+    periodAmountAtomic: string;
+    /** The PARENT's period duration (seconds), reused verbatim in the caveat. */
+    periodDurationSeconds: number;
+    /** The PARENT's period anchor, reused verbatim in the caveat. */
+    startDate: number;
+    recipientAddress: string | null;
+    /** unix seconds — the `TimestampEnforcer`'s `beforeThreshold`. */
+    expiresAt: number;
+    /** The hash of the row's parent delegation (`parent_delegation_hash`). */
+    parentDelegationHash: string;
+    /**
+     * A's own derived delegate account — the child's `delegator` on BOTH rows.
+     */
+    delegateAccount: string;
+    /**
+     * The row's own `delegate`: A's account again for the parent-child row,
+     * B's delegate account for the grant row. Served in the sign-context's
+     * `expected` (read from the stored child JSON, not trusted caller input).
+     */
+    childDelegateAccount: string;
+}
+/**
+ * Verify a sub-budget child delegation is EXACTLY what
+ * `GET /sub-budgets/:id/sign-context` (purpose `open`) declared, that its
+ * `delegator` is this signer's own account, and that its `delegate` is the
+ * declared child delegate. Throws `HavenTypedDataRefusedError` (never
+ * returns) on any disagreement.
+ */
+declare function assertOwnSubBudgetChild(typedData: unknown, expected: SubBudgetChildExpectation, delegateAddress: string, now?: number): void;
+/** Close UserOp verification — byte-for-byte the task-budget discipline. */
+declare function assertOwnSubBudgetCloseUserOp(typedData: Record<string, unknown>, expected: {
+    delegationHash: string;
+}, delegateAddress: string): void;
+
+export { DELEGATION_TUPLE_COMPONENTS, DelegationForHashing, ERC20_PERIOD_TRANSFER_ENFORCER, REDEEM_DELEGATIONS_ABI, SINGLE_DEFAULT_MODE, type SubBudgetChildExpectation, type SubBudgetChildTypedData, addressFromKey, assertOwnSubBudgetChild, assertOwnSubBudgetCloseUserOp, assertRedeemsOwnBudgetDelegation, hashSubBudgetDelegation, signHash, verifySignature };

package/dist/edge.js

@@ -1,6 +1,7 @@
-export { DIRECT_PAYMENT_CHAIN_IDS, EXECUTE_ABI, HAVEN_CLIENT_HEADER, HAVEN_MINIMUM_NODE_VERSION, HavenTypedDataRefusedError, TYPED_DATA_NOT_ALLOWED, assertBoundDirectPaymentUserOp, assertFundingLegPaysDelegate, assertOwnSettlementChild, buildSweepAuthorizationMessage, buildSweepTypedData, buildX402ExpectedMessage, createNextStepBuilder, decodeBase64Json, encodeBase64Json, havenClientIdentity, isSupportedNodeVersion, readClientUpdate, selectStandardPaymentOption, toStandardPaymentRequirements, unsupportedNodeVersionMessage, x402AuthorizationAmount, x402V2PaymentEnvelope } from './chunk-KQ7JXKTV.js';
-import { HavenSigningError } from './chunk-GLNG2GF7.js';
-export { AgentPaymentFailureCode, AgentPaymentNextAction, CAVEAT_ENFORCERS, DELEGATION_MANAGER, DELEGATION_TUPLE_COMPONENTS, DIRECT_SIGN_CONTEXT_VERSION, ENTRY_POINT_V07, HAVEN_CONNECTOR_CHANNEL, HYBRID_DELEGATOR_IMPLEMENTATION, HavenApiError, HavenError, HavenSigningError, HavenUnsupportedSignerVersionError, HavenUserOpBindingError, MAX_SETTLEMENT_WINDOW_SECONDS, REDEEM_DELEGATIONS_ABI, ROOT_AUTHORITY, SIGNER_UPDATE_FALLBACK, SIMPLE_FACTORY_ADDRESS, SINGLE_DEFAULT_MODE, SignerRefusalCode, assertRedeemsOwnBudgetDelegation, assertUserOpTypedDataBinding, chainIdForNetwork, connectorRerunCommand, deriveDelegateAccountAddress, isPackedUserOperationTypedData, isSettlementChildTypedData, packedUserOperationHash, verifySettlementChild } from './chunk-GLNG2GF7.js';
+import { hashDelegation, DIRECT_PAYMENT_CHAIN_IDS, assertOwnTaskBudgetCloseUserOp, HavenTypedDataRefusedError } from './chunk-R3RZJJWL.js';
+export { CAVEAT_TYPEHASH, DELEGATION_TYPEHASH, DIRECT_PAYMENT_CHAIN_IDS, EXECUTE_ABI, HAVEN_CLIENT_HEADER, HAVEN_MINIMUM_NODE_VERSION, HavenTypedDataRefusedError, MAX_TASK_BUDGET_TTL_SECONDS, TYPED_DATA_NOT_ALLOWED, assertBoundDirectPaymentUserOp, assertFundingLegPaysDelegate, assertOwnSettlementChild, assertOwnTaskBudgetCloseUserOp, assertOwnTaskChild, buildSweepAuthorizationMessage, buildSweepTypedData, buildX402ExpectedMessage, createNextStepBuilder, decodeBase64Json, encodeBase64Json, hashDelegation, havenClientIdentity, isSupportedNodeVersion, isTaskChildTypedData, readClientUpdate, selectStandardPaymentOption, toStandardPaymentRequirements, unsupportedNodeVersionMessage, x402AuthorizationAmount, x402V2PaymentEnvelope } from './chunk-R3RZJJWL.js';
+import { HavenSigningError, DELEGATION_MANAGER, deriveDelegateAccountAddress, ROOT_AUTHORITY, CAVEAT_ENFORCERS } from './chunk-NNIT7WAI.js';
+export { AgentPaymentFailureCode, AgentPaymentNextAction, CAVEAT_ENFORCERS, DELEGATION_MANAGER, DELEGATION_TUPLE_COMPONENTS, DIRECT_SIGN_CONTEXT_VERSION, ENTRY_POINT_V07, HAVEN_CONNECTOR_CHANNEL, HYBRID_DELEGATOR_IMPLEMENTATION, HavenApiError, HavenError, HavenSigningError, HavenUnsupportedSignerVersionError, HavenUserOpBindingError, MAX_SETTLEMENT_WINDOW_SECONDS, REDEEM_DELEGATIONS_ABI, ROOT_AUTHORITY, SIGNER_UPDATE_FALLBACK, SIMPLE_FACTORY_ADDRESS, SINGLE_DEFAULT_MODE, SignerRefusalCode, TASK_SIGN_CONTEXT_VERSION, assertRedeemsOwnBudgetDelegation, assertUserOpTypedDataBinding, chainIdForNetwork, connectorRerunCommand, connectorUpgradeCommand, deriveDelegateAccountAddress, isPackedUserOperationTypedData, isSettlementChildTypedData, packedUserOperationHash, verifySettlementChild } from './chunk-NNIT7WAI.js';
 import { secp256k1 } from '@noble/curves/secp256k1';
 import { privateKeyToAddress, publicKeyToAddress } from 'viem/accounts';
 import { serializeSignature } from 'viem';
@@ -51,6 +52,205 @@ function verifySignature(hash, signature, expectedAddress) {
   }
 }
 
-export { addressFromKey, signHash, verifySignature };
+// src/sub-budget-guards.ts
+var ERC20_PERIOD_TRANSFER_ENFORCER = "0x474e3Ae7E169e940607cC624Da8A15Eb120139aB";
+var DELEGATION_DOMAIN_NAME = "DelegationManager";
+var DELEGATION_DOMAIN_VERSION = "1";
+var EXPECTED_DELEGATION_TYPES = {
+  Caveat: [
+    { name: "enforcer", type: "address" },
+    { name: "terms", type: "bytes" }
+  ],
+  Delegation: [
+    { name: "delegate", type: "address" },
+    { name: "delegator", type: "address" },
+    { name: "authority", type: "bytes32" },
+    { name: "caveats", type: "Caveat[]" },
+    { name: "salt", type: "uint256" }
+  ]
+};
+function same(a, b) {
+  return !!a && !!b && a.toLowerCase() === b.toLowerCase();
+}
+function sliceTerms(terms, start, end) {
+  const body = terms.startsWith("0x") ? terms.slice(2).toLowerCase() : terms.toLowerCase();
+  return end === void 0 ? body.slice(start * 2) : body.slice(start * 2, end * 2);
+}
+function findCaveat(caveats, enforcer) {
+  return caveats.find((c) => same(c.enforcer, enforcer));
+}
+function hashSubBudgetDelegation(delegation) {
+  return hashDelegation(delegation);
+}
+function refuseSubBudgetChild(what, detail) {
+  throw new HavenTypedDataRefusedError(
+    `Refusing to sign the sub-budget child: ${what}. ${detail} This signature opens a slice of the delegating agent budget for another agent, so it is verified locally against the expectation Haven declared, rather than trusted.`
+  );
+}
+function assertOwnSubBudgetChild(typedData, expected, delegateAddress, now = Date.now()) {
+  const td = typedData;
+  if (td?.primaryType !== "Delegation") {
+    refuseSubBudgetChild("it is not a Delegation payload", `primaryType was '${String(td?.primaryType)}'.`);
+  }
+  if (!same(td.domain?.verifyingContract, DELEGATION_MANAGER)) {
+    refuseSubBudgetChild(
+      "the EIP-712 domain names an unknown DelegationManager",
+      `Expected ${DELEGATION_MANAGER}, got ${td.domain?.verifyingContract}.`
+    );
+  }
+  if (td.domain?.name !== DELEGATION_DOMAIN_NAME || td.domain?.version !== DELEGATION_DOMAIN_VERSION) {
+    refuseSubBudgetChild(
+      "the EIP-712 domain name/version does not match the pinned DelegationManager domain",
+      `Expected name '${DELEGATION_DOMAIN_NAME}' version '${DELEGATION_DOMAIN_VERSION}'; got name '${String(td.domain?.name)}' version '${String(td.domain?.version)}'.`
+    );
+  }
+  if (JSON.stringify(td.types?.Caveat) !== JSON.stringify(EXPECTED_DELEGATION_TYPES.Caveat) || JSON.stringify(td.types?.Delegation) !== JSON.stringify(EXPECTED_DELEGATION_TYPES.Delegation)) {
+    refuseSubBudgetChild(
+      "its EIP-712 type definitions do not match the pinned Delegation/Caveat shape",
+      "A renamed, reordered, or additional field on Delegation or Caveat could change what the caveats below mean without changing this check's field-by-field comparisons."
+    );
+  }
+  const domainChain = Number(td.domain?.chainId);
+  if (!Number.isFinite(domainChain) || !DIRECT_PAYMENT_CHAIN_IDS.has(domainChain)) {
+    refuseSubBudgetChild(
+      "it is scoped to a chain the delegation rail has no pinned contracts for",
+      `Chains with pinned contracts: ${[...DIRECT_PAYMENT_CHAIN_IDS].join(", ")}; the child says ${String(td.domain?.chainId)}.`
+    );
+  }
+  if (domainChain !== expected.chainId) {
+    refuseSubBudgetChild(
+      "it is scoped to the wrong chain",
+      `Expected chain ${expected.chainId}; the child says ${td.domain?.chainId}.`
+    );
+  }
+  const ownAccount = deriveDelegateAccountAddress(delegateAddress);
+  const delegator = td.message?.delegator;
+  if (typeof delegator !== "string" || !same(delegator, ownAccount)) {
+    refuseSubBudgetChild(
+      "it is not delegated by this agent's own account",
+      `Expected delegator ${ownAccount}; the child names ${String(delegator)}.`
+    );
+  }
+  if (!same(delegator, expected.delegateAccount)) {
+    refuseSubBudgetChild(
+      "its delegator does not match the account Haven declared",
+      `Expected ${expected.delegateAccount}; the child names ${String(delegator)}.`
+    );
+  }
+  const delegate = td.message?.delegate;
+  if (typeof delegate !== "string" || !same(delegate, expected.childDelegateAccount)) {
+    refuseSubBudgetChild(
+      "its delegate does not match the declared child delegate",
+      `Expected ${expected.childDelegateAccount}; the child names ${String(delegate)}.`
+    );
+  }
+  const authority = td.message?.authority;
+  if (typeof authority !== "string" || !/^0x[0-9a-fA-F]{64}$/.test(authority)) {
+    refuseSubBudgetChild("its authority is not a 32-byte delegation hash", `Got ${String(authority)}.`);
+  }
+  if (authority.toLowerCase() === ROOT_AUTHORITY) {
+    refuseSubBudgetChild(
+      "it is a ROOT delegation, not a re-delegation of the delegating agent budget",
+      "A sub-budget always chains under the delegating agent budget delegation."
+    );
+  }
+  if (!same(authority, expected.parentDelegationHash)) {
+    refuseSubBudgetChild(
+      "it chains under a different parent delegation",
+      `Expected authority ${expected.parentDelegationHash}; the child says ${authority}.`
+    );
+  }
+  const caveats = td.message?.caveats ?? [];
+  if (findCaveat(caveats, CAVEAT_ENFORCERS.erc20TransferAmount)) {
+    refuseSubBudgetChild(
+      "it carries a hard-cap transfer-amount caveat (the task-budget shape)",
+      "A sub-budget is period-scoped: its amount caveat must be an ERC20PeriodTransferEnforcer caveat slicing the parent period meter, never a lifetime cap."
+    );
+  }
+  const period = findCaveat(caveats, ERC20_PERIOD_TRANSFER_ENFORCER);
+  if (!period) {
+    refuseSubBudgetChild(
+      "it has no ERC-20 period-transfer caveat",
+      "Without it the child is not bounded to a per-period amount."
+    );
+  }
+  const token = `0x${sliceTerms(period.terms, 0, 20)}`;
+  if (!same(token, expected.tokenAddress)) {
+    refuseSubBudgetChild("it spends a different token", `Expected ${expected.tokenAddress}, child pins ${token}.`);
+  }
+  const periodAmount = BigInt(`0x${sliceTerms(period.terms, 20, 52)}`);
+  if (periodAmount !== BigInt(expected.periodAmountAtomic)) {
+    refuseSubBudgetChild(
+      "the period amount does not match",
+      `Expected ${expected.periodAmountAtomic}; the child allows ${periodAmount.toString()}.`
+    );
+  }
+  const periodDuration = Number(BigInt(`0x${sliceTerms(period.terms, 52, 84)}`));
+  if (periodDuration !== expected.periodDurationSeconds) {
+    refuseSubBudgetChild(
+      "its period duration does not match the parent window Haven declared",
+      `Expected ${expected.periodDurationSeconds}s; the child says ${periodDuration}s. A sub-budget is a slice of the parent period meter \u2014 same window, smaller amount \u2014 never a different clock.`
+    );
+  }
+  const startDate = Number(BigInt(`0x${sliceTerms(period.terms, 84, 116)}`));
+  if (startDate !== expected.startDate) {
+    refuseSubBudgetChild(
+      "its period start does not match the parent anchor Haven declared",
+      `Expected ${expected.startDate}; the child says ${startDate}.`
+    );
+  }
+  const timestamp = findCaveat(caveats, CAVEAT_ENFORCERS.timestamp);
+  if (!timestamp) {
+    refuseSubBudgetChild("it never expires", "A sub-budget child without a timestamp caveat is open-ended.");
+  }
+  const beforeThreshold = Number(BigInt(`0x${sliceTerms(timestamp.terms, 16, 32)}`));
+  const nowSec = Math.floor(now / 1e3);
+  if (beforeThreshold <= nowSec) {
+    refuseSubBudgetChild("it has already expired", `Expiry ${beforeThreshold} is not in the future.`);
+  }
+  if (beforeThreshold !== expected.expiresAt) {
+    refuseSubBudgetChild(
+      "its expiry does not match what Haven declared",
+      `Expected ${expected.expiresAt}; the child says ${beforeThreshold}.`
+    );
+  }
+  const calldata = findCaveat(caveats, CAVEAT_ENFORCERS.allowedCalldata);
+  if (expected.recipientAddress) {
+    if (!calldata) {
+      refuseSubBudgetChild(
+        "it has no recipient pin",
+        "The sub-budget was issued with a pinned recipient, so the child must carry one."
+      );
+    }
+    const startIndex = BigInt(`0x${sliceTerms(calldata.terms, 0, 32)}`);
+    if (startIndex !== 4n) {
+      refuseSubBudgetChild(
+        "the recipient pin points at the wrong calldata offset",
+        `Expected offset 4, got ${startIndex.toString()}.`
+      );
+    }
+    const paddedRecipient = sliceTerms(calldata.terms, 32, 64);
+    if (paddedRecipient.slice(0, 24) !== "0".repeat(24)) {
+      refuseSubBudgetChild("the pinned recipient is not a plain address", "Its 32-byte word is not a padded address.");
+    }
+    const recipient = `0x${paddedRecipient.slice(24)}`;
+    if (!same(recipient, expected.recipientAddress)) {
+      refuseSubBudgetChild(
+        "it pins a different recipient than Haven declared",
+        `Expected ${expected.recipientAddress}; the child pins ${recipient}.`
+      );
+    }
+  } else if (calldata) {
+    refuseSubBudgetChild(
+      "it pins a recipient the sub-budget was not issued with",
+      "This sub-budget is open (no recipient pin); the child must not add one."
+    );
+  }
+}
+function assertOwnSubBudgetCloseUserOp(typedData, expected, delegateAddress) {
+  assertOwnTaskBudgetCloseUserOp(typedData, expected, delegateAddress);
+}
+
+export { ERC20_PERIOD_TRANSFER_ENFORCER, addressFromKey, assertOwnSubBudgetChild, assertOwnSubBudgetCloseUserOp, hashSubBudgetDelegation, signHash, verifySignature };
 //# sourceMappingURL=edge.js.map
 //# sourceMappingURL=edge.js.map

package/dist/edge.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/edge-signing.ts"],"names":[],"mappings":";;;;;;;AAsBA,IAAM,MAAA,GAAS,OAAO,oEAAoE,CAAA;AAW1F,SAAS,QAAA,CAAS,KAAA,EAAe,KAAA,EAAe,IAAA,EAAsB;AACpE,EAAA,IAAI,CAAC,mBAAmB,IAAA,CAAK,KAAK,KAAK,KAAA,CAAM,MAAA,KAAW,CAAA,GAAI,KAAA,GAAQ,CAAA,EAAG;AACrE,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,EAAG,IAAI,CAAA,uBAAA,EAA0B,KAAK,CAAA,gBAAA,CAAkB,CAAA;AAAA,EAC1E;AACA,EAAA,OAAO,KAAA,CAAM,MAAM,CAAC,CAAA;AACtB;AAEO,SAAS,eAAe,UAAA,EAA4B;AACzD,EAAA,IAAI;AAEF,IAAA,OAAO,oBAAoB,CAAA,EAAA,EAAK,QAAA,CAAS,YAAY,EAAA,EAAI,aAAa,CAAC,CAAA,CAAE,CAAA;AAAA,EAC3E,SAAS,GAAA,EAAK;AACZ,IAAA,MAAM,IAAI,iBAAA;AAAA,MACR,wBAAwB,GAAA,YAAe,KAAA,GAAQ,IAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAC,CAAA;AAAA,KAC1E;AAAA,EACF;AACF;AAEO,SAAS,QAAA,CAAS,YAAoB,IAAA,EAAsB;AACjE,EAAA,IAAI;AACF,IAAA,MAAM,EAAE,GAAG,CAAA,EAAG,QAAA,KAAa,SAAA,CAAU,IAAA,CAAK,SAAS,IAAA,EAAM,EAAA,EAAI,MAAM,CAAA,EAAG,QAAA,CAAS,YAAY,EAAA,EAAI,aAAa,GAAG,EAAE,IAAA,EAAM,MAAM,CAAA;AAG7H,IAAA,OAAO,kBAAA,CAAmB;AAAA,MACxB,CAAA,EAAG,KAAK,CAAA,CAAE,QAAA,CAAS,EAAE,CAAA,CAAE,QAAA,CAAS,EAAA,EAAI,GAAG,CAAC,CAAA,CAAA;AAAA,MACxC,CAAA,EAAG,KAAK,CAAA,CAAE,QAAA,CAAS,EAAE,CAAA,CAAE,QAAA,CAAS,EAAA,EAAI,GAAG,CAAC,CAAA,CAAA;AAAA,MACxC,OAAA,EAAS;AAAA,KACV,CAAA;AAAA,EACH,SAAS,GAAA,EAAK;AACZ,IAAA,MAAM,IAAI,iBAAA;AAAA,MACR,wBAAwB,GAAA,YAAe,KAAA,GAAQ,IAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAC,CAAA;AAAA,KAC1E;AAAA,EACF;AACF;AAEO,SAAS,eAAA,CAAgB,IAAA,EAAc,SAAA,EAAmB,eAAA,EAAkC;AACjG,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,QAAA,CAAS,SAAA,EAAW,EAAA,EAAI,WAAW,CAAA;AAC/C,IAAA,MAAM,OAAA,GAAU,QAAA,CAAS,IAAA,EAAM,EAAA,EAAI,MAAM,CAAA;AAEzC,IAAA,IAAI,MAAA,CAAO,CAAA,EAAA,EAAK,GAAA,CAAI,KAAA,CAAM,EAAA,EAAI,GAAG,CAAC,CAAA,CAAE,CAAA,GAAI,MAAA,EAAQ,OAAO,KAAA;AACvD,IAAA,MAAM,aAAa,MAAA,CAAO,QAAA,CAAS,IAAI,KAAA,CAAM,GAAG,GAAG,EAAE,CAAA;AACrD,IAAA,MAAM,WAAA,GAAc,UAAA,KAAe,CAAA,IAAK,UAAA,KAAe,EAAA,GAAK,IAAI,UAAA,KAAe,CAAA,IAAK,UAAA,KAAe,EAAA,GAAK,CAAA,GAAI,CAAA,CAAA;AAC5G,IAAA,IAAI,WAAA,GAAc,GAAG,OAAO,KAAA;AAC5B,IAAA,MAAM,YAAY,SAAA,CAAU,SAAA,CAAU,WAAA,CAAY,GAAA,CAAI,MAAM,CAAA,EAAG,GAAG,CAAC,CAAA,CAChE,eAAe,WAAW,CAAA,CAC1B,iBAAiB,OAAO,CAAA,CACxB,MAAM,KAAK,CAAA;AACd,IAAA,MAAM,SAAA,GAAY,kBAAA,CAAmB,CAAA,EAAA,EAAK,SAAS,CAAA,CAAE,CAAA;AACrD,IAAA,OAAO,SAAA,CAAU,WAAA,EAAY,KAAM,eAAA,CAAgB,WAAA,EAAY;AAAA,EACjE,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF","file":"edge.js","sourcesContent":["import { secp256k1 } from '@noble/curves/secp256k1'\nimport { privateKeyToAddress, publicKeyToAddress } from 'viem/accounts'\nimport { serializeSignature, type Hex } from 'viem'\nimport { HavenSigningError } from './types.js'\n\n/**\n * #3173: the three key helpers the edge signer needs, without ethers.\n *\n * `./signer.ts` implements the same three on ethers, and the SDK barrel pulls\n * ethers in for them (and for `provider.ts` / `receipt.ts`). The edge signer\n * already ships viem, and viem signs with `@noble/curves` underneath — these\n * use the same curve library directly, synchronously (viem's own `sign` is\n * async), so `@haven_ai/sdk/edge` stays ethers-free and a signer session stops\n * paying for module init it never uses. Byte-equivalence with the ethers forms\n * is pinned in `edge-signing.test.ts`: same address, same 65-byte `r‖s‖v`\n * serialisation with low-s and v = 27/28, same recovery verdicts, and the same\n * refusals (high-s twin, wrong lengths) — with three stated strict-direction\n * exceptions, see `hexBytes`. Raw ECDSA over the hash — never the EIP-191\n * prefixed digest.\n */\n\n/** secp256k1 order / 2 — a signature with s above this is the malleable twin ethers rejects. */\nconst HALF_N = BigInt('0x7FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF5D576E7357A4501DDFE92F46681B20A0')\n\n/**\n * Stricter than ethers, never looser: the lowercase `0x` prefix and the exact\n * byte length are required. Ethers accepts an uppercase `0X` prefix on a\n * signature and the 64-byte EIP-2098 compact form, and is inconsistent on a\n * private key (`Wallet` accepts unprefixed and refuses `0X`; `SigningKey` does\n * the reverse); every such form is refused here — the divergences are pinned\n * in `edge-signing.test.ts` with ethers control assertions, and every\n * well-formed input is byte-equivalent.\n */\nfunction hexBytes(value: string, bytes: number, what: string): string {\n  if (!/^0x[0-9a-fA-F]+$/.test(value) || value.length !== 2 + bytes * 2) {\n    throw new Error(`${what} must be a 0x-prefixed ${bytes}-byte hex string`)\n  }\n  return value.slice(2)\n}\n\nexport function addressFromKey(privateKey: string): string {\n  try {\n    // Same gate as signHash: a key that derives an address must also sign.\n    return privateKeyToAddress(`0x${hexBytes(privateKey, 32, 'private key')}`)\n  } catch (err) {\n    throw new HavenSigningError(\n      `Invalid private key: ${err instanceof Error ? err.message : String(err)}`,\n    )\n  }\n}\n\nexport function signHash(privateKey: string, hash: string): string {\n  try {\n    const { r, s, recovery } = secp256k1.sign(hexBytes(hash, 32, 'hash'), hexBytes(privateKey, 32, 'private key'), { lowS: true })\n    // viem serialises the trailing byte from yParity (0/1 → 27/28), the same\n    // `v` ethers' `Signature.serialized` writes.\n    return serializeSignature({\n      r: `0x${r.toString(16).padStart(64, '0')}`,\n      s: `0x${s.toString(16).padStart(64, '0')}`,\n      yParity: recovery,\n    })\n  } catch (err) {\n    throw new HavenSigningError(\n      `Failed to sign hash: ${err instanceof Error ? err.message : String(err)}`,\n    )\n  }\n}\n\nexport function verifySignature(hash: string, signature: string, expectedAddress: string): boolean {\n  try {\n    const sig = hexBytes(signature, 65, 'signature')\n    const hashHex = hexBytes(hash, 32, 'hash')\n    // Reject the high-s malleable twin, as ethers does — one signature per message.\n    if (BigInt(`0x${sig.slice(64, 128)}`) > HALF_N) return false\n    const yParityOrV = Number.parseInt(sig.slice(128), 16)\n    const recoveryBit = yParityOrV === 0 || yParityOrV === 27 ? 0 : yParityOrV === 1 || yParityOrV === 28 ? 1 : -1\n    if (recoveryBit < 0) return false\n    const publicKey = secp256k1.Signature.fromCompact(sig.slice(0, 128))\n      .addRecoveryBit(recoveryBit)\n      .recoverPublicKey(hashHex)\n      .toHex(false)\n    const recovered = publicKeyToAddress(`0x${publicKey}`)\n    return recovered.toLowerCase() === expectedAddress.toLowerCase()\n  } catch {\n    return false\n  }\n}\n"]}
+{"version":3,"sources":["../src/edge-signing.ts","../src/sub-budget-guards.ts"],"names":[],"mappings":";;;;;;;;AAsBA,IAAM,MAAA,GAAS,OAAO,oEAAoE,CAAA;AAW1F,SAAS,QAAA,CAAS,KAAA,EAAe,KAAA,EAAe,IAAA,EAAsB;AACpE,EAAA,IAAI,CAAC,mBAAmB,IAAA,CAAK,KAAK,KAAK,KAAA,CAAM,MAAA,KAAW,CAAA,GAAI,KAAA,GAAQ,CAAA,EAAG;AACrE,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,EAAG,IAAI,CAAA,uBAAA,EAA0B,KAAK,CAAA,gBAAA,CAAkB,CAAA;AAAA,EAC1E;AACA,EAAA,OAAO,KAAA,CAAM,MAAM,CAAC,CAAA;AACtB;AAEO,SAAS,eAAe,UAAA,EAA4B;AACzD,EAAA,IAAI;AAEF,IAAA,OAAO,oBAAoB,CAAA,EAAA,EAAK,QAAA,CAAS,YAAY,EAAA,EAAI,aAAa,CAAC,CAAA,CAAE,CAAA;AAAA,EAC3E,SAAS,GAAA,EAAK;AACZ,IAAA,MAAM,IAAI,iBAAA;AAAA,MACR,wBAAwB,GAAA,YAAe,KAAA,GAAQ,IAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAC,CAAA;AAAA,KAC1E;AAAA,EACF;AACF;AAEO,SAAS,QAAA,CAAS,YAAoB,IAAA,EAAsB;AACjE,EAAA,IAAI;AACF,IAAA,MAAM,EAAE,GAAG,CAAA,EAAG,QAAA,KAAa,SAAA,CAAU,IAAA,CAAK,SAAS,IAAA,EAAM,EAAA,EAAI,MAAM,CAAA,EAAG,QAAA,CAAS,YAAY,EAAA,EAAI,aAAa,GAAG,EAAE,IAAA,EAAM,MAAM,CAAA;AAG7H,IAAA,OAAO,kBAAA,CAAmB;AAAA,MACxB,CAAA,EAAG,KAAK,CAAA,CAAE,QAAA,CAAS,EAAE,CAAA,CAAE,QAAA,CAAS,EAAA,EAAI,GAAG,CAAC,CAAA,CAAA;AAAA,MACxC,CAAA,EAAG,KAAK,CAAA,CAAE,QAAA,CAAS,EAAE,CAAA,CAAE,QAAA,CAAS,EAAA,EAAI,GAAG,CAAC,CAAA,CAAA;AAAA,MACxC,OAAA,EAAS;AAAA,KACV,CAAA;AAAA,EACH,SAAS,GAAA,EAAK;AACZ,IAAA,MAAM,IAAI,iBAAA;AAAA,MACR,wBAAwB,GAAA,YAAe,KAAA,GAAQ,IAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAC,CAAA;AAAA,KAC1E;AAAA,EACF;AACF;AAEO,SAAS,eAAA,CAAgB,IAAA,EAAc,SAAA,EAAmB,eAAA,EAAkC;AACjG,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,QAAA,CAAS,SAAA,EAAW,EAAA,EAAI,WAAW,CAAA;AAC/C,IAAA,MAAM,OAAA,GAAU,QAAA,CAAS,IAAA,EAAM,EAAA,EAAI,MAAM,CAAA;AAEzC,IAAA,IAAI,MAAA,CAAO,CAAA,EAAA,EAAK,GAAA,CAAI,KAAA,CAAM,EAAA,EAAI,GAAG,CAAC,CAAA,CAAE,CAAA,GAAI,MAAA,EAAQ,OAAO,KAAA;AACvD,IAAA,MAAM,aAAa,MAAA,CAAO,QAAA,CAAS,IAAI,KAAA,CAAM,GAAG,GAAG,EAAE,CAAA;AACrD,IAAA,MAAM,WAAA,GAAc,UAAA,KAAe,CAAA,IAAK,UAAA,KAAe,EAAA,GAAK,IAAI,UAAA,KAAe,CAAA,IAAK,UAAA,KAAe,EAAA,GAAK,CAAA,GAAI,CAAA,CAAA;AAC5G,IAAA,IAAI,WAAA,GAAc,GAAG,OAAO,KAAA;AAC5B,IAAA,MAAM,YAAY,SAAA,CAAU,SAAA,CAAU,WAAA,CAAY,GAAA,CAAI,MAAM,CAAA,EAAG,GAAG,CAAC,CAAA,CAChE,eAAe,WAAW,CAAA,CAC1B,iBAAiB,OAAO,CAAA,CACxB,MAAM,KAAK,CAAA;AACd,IAAA,MAAM,SAAA,GAAY,kBAAA,CAAmB,CAAA,EAAA,EAAK,SAAS,CAAA,CAAE,CAAA;AACrD,IAAA,OAAO,SAAA,CAAU,WAAA,EAAY,KAAM,eAAA,CAAgB,WAAA,EAAY;AAAA,EACjE,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF;;;AC7CO,IAAM,8BAAA,GAAiC;AAG9C,IAAM,sBAAA,GAAyB,mBAAA;AAC/B,IAAM,yBAAA,GAA4B,GAAA;AAGlC,IAAM,yBAAA,GAA4B;AAAA,EAChC,MAAA,EAAQ;AAAA,IACN,EAAE,IAAA,EAAM,UAAA,EAAY,IAAA,EAAM,SAAA,EAAU;AAAA,IACpC,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,OAAA;AAAQ,GACjC;AAAA,EACA,UAAA,EAAY;AAAA,IACV,EAAE,IAAA,EAAM,UAAA,EAAY,IAAA,EAAM,SAAA,EAAU;AAAA,IACpC,EAAE,IAAA,EAAM,WAAA,EAAa,IAAA,EAAM,SAAA,EAAU;AAAA,IACrC,EAAE,IAAA,EAAM,WAAA,EAAa,IAAA,EAAM,SAAA,EAAU;AAAA,IACrC,EAAE,IAAA,EAAM,SAAA,EAAW,IAAA,EAAM,UAAA,EAAW;AAAA,IACpC,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,SAAA;AAAU;AAEpC,CAAA;AASA,SAAS,IAAA,CAAK,GAAuB,CAAA,EAAgC;AACnE,EAAA,OAAO,CAAC,CAAC,CAAA,IAAK,CAAC,CAAC,KAAK,CAAA,CAAE,WAAA,EAAY,KAAM,CAAA,CAAE,WAAA,EAAY;AACzD;AAGA,SAAS,UAAA,CAAW,KAAA,EAAe,KAAA,EAAe,GAAA,EAAsB;AACtE,EAAA,MAAM,IAAA,GAAO,KAAA,CAAM,UAAA,CAAW,IAAI,CAAA,GAAI,KAAA,CAAM,KAAA,CAAM,CAAC,CAAA,CAAE,WAAA,EAAY,GAAI,KAAA,CAAM,WAAA,EAAY;AACvF,EAAA,OAAO,GAAA,KAAQ,MAAA,GAAY,IAAA,CAAK,KAAA,CAAM,KAAA,GAAQ,CAAC,CAAA,GAAI,IAAA,CAAK,KAAA,CAAM,KAAA,GAAQ,CAAA,EAAG,GAAA,GAAM,CAAC,CAAA;AAClF;AAEA,SAAS,UAAA,CAAW,SAAqD,QAAA,EAAkB;AACzF,EAAA,OAAO,OAAA,CAAQ,KAAK,CAAC,CAAA,KAAM,KAAK,CAAA,CAAE,QAAA,EAAU,QAAQ,CAAC,CAAA;AACvD;AAGO,SAAS,wBAAwB,UAAA,EAAuC;AAC7E,EAAA,OAAO,eAAe,UAAU,CAAA;AAClC;AAgCA,SAAS,oBAAA,CAAqB,MAAc,MAAA,EAAuB;AACjE,EAAA,MAAM,IAAI,0BAAA;AAAA,IACR,CAAA,uCAAA,EAA0C,IAAI,CAAA,EAAA,EAAK,MAAM,CAAA,sKAAA;AAAA,GAG3D;AACF;AASO,SAAS,wBACd,SAAA,EACA,QAAA,EACA,iBACA,GAAA,GAAc,IAAA,CAAK,KAAI,EACjB;AACN,EAAA,MAAM,EAAA,GAAK,SAAA;AACX,EAAA,IAAI,EAAA,EAAI,gBAAgB,YAAA,EAAc;AACpC,IAAA,oBAAA,CAAqB,kCAAkC,CAAA,iBAAA,EAAoB,MAAA,CAAO,EAAA,EAAI,WAAW,CAAC,CAAA,EAAA,CAAI,CAAA;AAAA,EACxG;AACA,EAAA,IAAI,CAAC,IAAA,CAAK,EAAA,CAAG,MAAA,EAAQ,iBAAA,EAAmB,kBAAkB,CAAA,EAAG;AAC3D,IAAA,oBAAA;AAAA,MACE,uDAAA;AAAA,MACA,CAAA,SAAA,EAAY,kBAAkB,CAAA,MAAA,EAAS,EAAA,CAAG,QAAQ,iBAAiB,CAAA,CAAA;AAAA,KACrE;AAAA,EACF;AACA,EAAA,IAAI,GAAG,MAAA,EAAQ,IAAA,KAAS,0BAA0B,EAAA,CAAG,MAAA,EAAQ,YAAY,yBAAA,EAA2B;AAClG,IAAA,oBAAA;AAAA,MACE,oFAAA;AAAA,MACA,CAAA,eAAA,EAAkB,sBAAsB,CAAA,WAAA,EAAc,yBAAyB,gBACzE,MAAA,CAAO,EAAA,CAAG,MAAA,EAAQ,IAAI,CAAC,CAAA,WAAA,EAAc,MAAA,CAAO,EAAA,CAAG,MAAA,EAAQ,OAAO,CAAC,CAAA,EAAA;AAAA,KACvE;AAAA,EACF;AACA,EAAA,IACE,IAAA,CAAK,UAAU,EAAA,CAAG,KAAA,EAAO,MAAM,CAAA,KAAM,IAAA,CAAK,UAAU,yBAAA,CAA0B,MAAM,KACpF,IAAA,CAAK,SAAA,CAAU,GAAG,KAAA,EAAO,UAAU,MAAM,IAAA,CAAK,SAAA,CAAU,yBAAA,CAA0B,UAAU,CAAA,EAC5F;AACA,IAAA,oBAAA;AAAA,MACE,8EAAA;AAAA,MACA;AAAA,KAEF;AAAA,EACF;AACA,EAAA,MAAM,WAAA,GAAc,MAAA,CAAO,EAAA,CAAG,MAAA,EAAQ,OAAO,CAAA;AAC7C,EAAA,IAAI,CAAC,OAAO,QAAA,CAAS,WAAW,KAAK,CAAC,wBAAA,CAAyB,GAAA,CAAI,WAAW,CAAA,EAAG;AAC/E,IAAA,oBAAA;AAAA,MACE,yEAAA;AAAA,MACA,CAAA,8BAAA,EAAiC,CAAC,GAAG,wBAAwB,CAAA,CAAE,IAAA,CAAK,IAAI,CAAC,CAAA,iBAAA,EAAoB,MAAA,CAAO,EAAA,CAAG,MAAA,EAAQ,OAAO,CAAC,CAAA,CAAA;AAAA,KACzH;AAAA,EACF;AACA,EAAA,IAAI,WAAA,KAAgB,SAAS,OAAA,EAAS;AACpC,IAAA,oBAAA;AAAA,MACE,iCAAA;AAAA,MACA,kBAAkB,QAAA,CAAS,OAAO,CAAA,iBAAA,EAAoB,EAAA,CAAG,QAAQ,OAAO,CAAA,CAAA;AAAA,KAC1E;AAAA,EACF;AAEA,EAAA,MAAM,UAAA,GAAa,6BAA6B,eAA0B,CAAA;AAC1E,EAAA,MAAM,SAAA,GAAY,GAAG,OAAA,EAAS,SAAA;AAC9B,EAAA,IAAI,OAAO,SAAA,KAAc,QAAA,IAAY,CAAC,IAAA,CAAK,SAAA,EAAW,UAAU,CAAA,EAAG;AACjE,IAAA,oBAAA;AAAA,MACE,iDAAA;AAAA,MACA,CAAA,mBAAA,EAAsB,UAAU,CAAA,kBAAA,EAAqB,MAAA,CAAO,SAAS,CAAC,CAAA,CAAA;AAAA,KACxE;AAAA,EACF;AACA,EAAA,IAAI,CAAC,IAAA,CAAK,SAAA,EAAW,QAAA,CAAS,eAAe,CAAA,EAAG;AAC9C,IAAA,oBAAA;AAAA,MACE,yDAAA;AAAA,MACA,YAAY,QAAA,CAAS,eAAe,CAAA,kBAAA,EAAqB,MAAA,CAAO,SAAS,CAAC,CAAA,CAAA;AAAA,KAC5E;AAAA,EACF;AACA,EAAA,MAAM,QAAA,GAAW,GAAG,OAAA,EAAS,QAAA;AAC7B,EAAA,IAAI,OAAO,aAAa,QAAA,IAAY,CAAC,KAAK,QAAA,EAAU,QAAA,CAAS,oBAAoB,CAAA,EAAG;AAClF,IAAA,oBAAA;AAAA,MACE,yDAAA;AAAA,MACA,YAAY,QAAA,CAAS,oBAAoB,CAAA,kBAAA,EAAqB,MAAA,CAAO,QAAQ,CAAC,CAAA,CAAA;AAAA,KAChF;AAAA,EACF;AAEA,EAAA,MAAM,SAAA,GAAY,GAAG,OAAA,EAAS,SAAA;AAC9B,EAAA,IAAI,OAAO,SAAA,KAAc,QAAA,IAAY,CAAC,qBAAA,CAAsB,IAAA,CAAK,SAAS,CAAA,EAAG;AAC3E,IAAA,oBAAA,CAAqB,gDAAA,EAAkD,CAAA,IAAA,EAAO,MAAA,CAAO,SAAS,CAAC,CAAA,CAAA,CAAG,CAAA;AAAA,EACpG;AACA,EAAA,IAAI,SAAA,CAAU,WAAA,EAAY,KAAM,cAAA,EAAgB;AAC9C,IAAA,oBAAA;AAAA,MACE,6EAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AACA,EAAA,IAAI,CAAC,IAAA,CAAK,SAAA,EAAW,QAAA,CAAS,oBAAoB,CAAA,EAAG;AACnD,IAAA,oBAAA;AAAA,MACE,+CAAA;AAAA,MACA,CAAA,mBAAA,EAAsB,QAAA,CAAS,oBAAoB,CAAA,iBAAA,EAAoB,SAAS,CAAA,CAAA;AAAA,KAClF;AAAA,EACF;AAEA,EAAA,MAAM,OAAA,GAAW,EAAA,CAAG,OAAA,EAAS,OAAA,IAAsE,EAAC;AAKpG,EAAA,IAAI,UAAA,CAAW,OAAA,EAAS,gBAAA,CAAiB,mBAAmB,CAAA,EAAG;AAC7D,IAAA,oBAAA;AAAA,MACE,sEAAA;AAAA,MACA;AAAA,KAEF;AAAA,EACF;AACA,EAAA,MAAM,MAAA,GAAS,UAAA,CAAW,OAAA,EAAS,8BAA8B,CAAA;AACjE,EAAA,IAAI,CAAC,MAAA,EAAQ;AACX,IAAA,oBAAA;AAAA,MACE,yCAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAOA,EAAA,MAAM,QAAQ,CAAA,EAAA,EAAK,UAAA,CAAW,OAAO,KAAA,EAAO,CAAA,EAAG,EAAE,CAAC,CAAA,CAAA;AAClD,EAAA,IAAI,CAAC,IAAA,CAAK,KAAA,EAAO,QAAA,CAAS,YAAY,CAAA,EAAG;AACvC,IAAA,oBAAA,CAAqB,+BAA+B,CAAA,SAAA,EAAY,QAAA,CAAS,YAAY,CAAA,aAAA,EAAgB,KAAK,CAAA,CAAA,CAAG,CAAA;AAAA,EAC/G;AACA,EAAA,MAAM,YAAA,GAAe,OAAO,CAAA,EAAA,EAAK,UAAA,CAAW,OAAO,KAAA,EAAO,EAAA,EAAI,EAAE,CAAC,CAAA,CAAE,CAAA;AACnE,EAAA,IAAI,YAAA,KAAiB,MAAA,CAAO,QAAA,CAAS,kBAAkB,CAAA,EAAG;AACxD,IAAA,oBAAA;AAAA,MACE,kCAAA;AAAA,MACA,YAAY,QAAA,CAAS,kBAAkB,CAAA,mBAAA,EAAsB,YAAA,CAAa,UAAU,CAAA,CAAA;AAAA,KACtF;AAAA,EACF;AACA,EAAA,MAAM,cAAA,GAAiB,MAAA,CAAO,MAAA,CAAO,CAAA,EAAA,EAAK,UAAA,CAAW,MAAA,CAAO,KAAA,EAAO,EAAA,EAAI,EAAE,CAAC,CAAA,CAAE,CAAC,CAAA;AAC7E,EAAA,IAAI,cAAA,KAAmB,SAAS,qBAAA,EAAuB;AACrD,IAAA,oBAAA;AAAA,MACE,qEAAA;AAAA,MACA,CAAA,SAAA,EAAY,QAAA,CAAS,qBAAqB,CAAA,kBAAA,EAAqB,cAAc,CAAA,wHAAA;AAAA,KAE/E;AAAA,EACF;AACA,EAAA,MAAM,SAAA,GAAY,MAAA,CAAO,MAAA,CAAO,CAAA,EAAA,EAAK,UAAA,CAAW,MAAA,CAAO,KAAA,EAAO,EAAA,EAAI,GAAG,CAAC,CAAA,CAAE,CAAC,CAAA;AACzE,EAAA,IAAI,SAAA,KAAc,SAAS,SAAA,EAAW;AACpC,IAAA,oBAAA;AAAA,MACE,kEAAA;AAAA,MACA,CAAA,SAAA,EAAY,QAAA,CAAS,SAAS,CAAA,iBAAA,EAAoB,SAAS,CAAA,CAAA;AAAA,KAC7D;AAAA,EACF;AAEA,EAAA,MAAM,SAAA,GAAY,UAAA,CAAW,OAAA,EAAS,gBAAA,CAAiB,SAAS,CAAA;AAChE,EAAA,IAAI,CAAC,SAAA,EAAW;AACd,IAAA,oBAAA,CAAqB,oBAAoB,8DAA8D,CAAA;AAAA,EACzG;AACA,EAAA,MAAM,eAAA,GAAkB,MAAA,CAAO,MAAA,CAAO,CAAA,EAAA,EAAK,UAAA,CAAW,SAAA,CAAU,KAAA,EAAO,EAAA,EAAI,EAAE,CAAC,CAAA,CAAE,CAAC,CAAA;AACjF,EAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,GAAA,GAAM,GAAI,CAAA;AACpC,EAAA,IAAI,mBAAmB,MAAA,EAAQ;AAC7B,IAAA,oBAAA,CAAqB,wBAAA,EAA0B,CAAA,OAAA,EAAU,eAAe,CAAA,sBAAA,CAAwB,CAAA;AAAA,EAClG;AACA,EAAA,IAAI,eAAA,KAAoB,SAAS,SAAA,EAAW;AAC1C,IAAA,oBAAA;AAAA,MACE,+CAAA;AAAA,MACA,CAAA,SAAA,EAAY,QAAA,CAAS,SAAS,CAAA,iBAAA,EAAoB,eAAe,CAAA,CAAA;AAAA,KACnE;AAAA,EACF;AAEA,EAAA,MAAM,QAAA,GAAW,UAAA,CAAW,OAAA,EAAS,gBAAA,CAAiB,eAAe,CAAA;AACrE,EAAA,IAAI,SAAS,gBAAA,EAAkB;AAC7B,IAAA,IAAI,CAAC,QAAA,EAAU;AACb,MAAA,oBAAA;AAAA,QACE,yBAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AACA,IAAA,MAAM,UAAA,GAAa,OAAO,CAAA,EAAA,EAAK,UAAA,CAAW,SAAS,KAAA,EAAO,CAAA,EAAG,EAAE,CAAC,CAAA,CAAE,CAAA;AAClE,IAAA,IAAI,eAAe,EAAA,EAAI;AACrB,MAAA,oBAAA;AAAA,QACE,uDAAA;AAAA,QACA,CAAA,uBAAA,EAA0B,UAAA,CAAW,QAAA,EAAU,CAAA,CAAA;AAAA,OACjD;AAAA,IACF;AACA,IAAA,MAAM,eAAA,GAAkB,UAAA,CAAW,QAAA,CAAS,KAAA,EAAO,IAAI,EAAE,CAAA;AACzD,IAAA,IAAI,eAAA,CAAgB,MAAM,CAAA,EAAG,EAAE,MAAM,GAAA,CAAI,MAAA,CAAO,EAAE,CAAA,EAAG;AACnD,MAAA,oBAAA,CAAqB,+CAA+C,2CAA2C,CAAA;AAAA,IACjH;AACA,IAAA,MAAM,SAAA,GAAY,CAAA,EAAA,EAAK,eAAA,CAAgB,KAAA,CAAM,EAAE,CAAC,CAAA,CAAA;AAChD,IAAA,IAAI,CAAC,IAAA,CAAK,SAAA,EAAW,QAAA,CAAS,gBAAgB,CAAA,EAAG;AAC/C,MAAA,oBAAA;AAAA,QACE,mDAAA;AAAA,QACA,CAAA,SAAA,EAAY,QAAA,CAAS,gBAAgB,CAAA,iBAAA,EAAoB,SAAS,CAAA,CAAA;AAAA,OACpE;AAAA,IACF;AAAA,EACF,WAAW,QAAA,EAAU;AACnB,IAAA,oBAAA;AAAA,MACE,wDAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AACF;AAGO,SAAS,6BAAA,CACd,SAAA,EACA,QAAA,EACA,eAAA,EACM;AAMN,EAAA,8BAAA,CAA+B,SAAA,EAAW,UAAU,eAAe,CAAA;AACrE","file":"edge.js","sourcesContent":["import { secp256k1 } from '@noble/curves/secp256k1'\nimport { privateKeyToAddress, publicKeyToAddress } from 'viem/accounts'\nimport { serializeSignature, type Hex } from 'viem'\nimport { HavenSigningError } from './types.js'\n\n/**\n * #3173: the three key helpers the edge signer needs, without ethers.\n *\n * `./signer.ts` implements the same three on ethers, and the SDK barrel pulls\n * ethers in for them (and for `provider.ts` / `receipt.ts`). The edge signer\n * already ships viem, and viem signs with `@noble/curves` underneath — these\n * use the same curve library directly, synchronously (viem's own `sign` is\n * async), so `@haven_ai/sdk/edge` stays ethers-free and a signer session stops\n * paying for module init it never uses. Byte-equivalence with the ethers forms\n * is pinned in `edge-signing.test.ts`: same address, same 65-byte `r‖s‖v`\n * serialisation with low-s and v = 27/28, same recovery verdicts, and the same\n * refusals (high-s twin, wrong lengths) — with three stated strict-direction\n * exceptions, see `hexBytes`. Raw ECDSA over the hash — never the EIP-191\n * prefixed digest.\n */\n\n/** secp256k1 order / 2 — a signature with s above this is the malleable twin ethers rejects. */\nconst HALF_N = BigInt('0x7FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF5D576E7357A4501DDFE92F46681B20A0')\n\n/**\n * Stricter than ethers, never looser: the lowercase `0x` prefix and the exact\n * byte length are required. Ethers accepts an uppercase `0X` prefix on a\n * signature and the 64-byte EIP-2098 compact form, and is inconsistent on a\n * private key (`Wallet` accepts unprefixed and refuses `0X`; `SigningKey` does\n * the reverse); every such form is refused here — the divergences are pinned\n * in `edge-signing.test.ts` with ethers control assertions, and every\n * well-formed input is byte-equivalent.\n */\nfunction hexBytes(value: string, bytes: number, what: string): string {\n  if (!/^0x[0-9a-fA-F]+$/.test(value) || value.length !== 2 + bytes * 2) {\n    throw new Error(`${what} must be a 0x-prefixed ${bytes}-byte hex string`)\n  }\n  return value.slice(2)\n}\n\nexport function addressFromKey(privateKey: string): string {\n  try {\n    // Same gate as signHash: a key that derives an address must also sign.\n    return privateKeyToAddress(`0x${hexBytes(privateKey, 32, 'private key')}`)\n  } catch (err) {\n    throw new HavenSigningError(\n      `Invalid private key: ${err instanceof Error ? err.message : String(err)}`,\n    )\n  }\n}\n\nexport function signHash(privateKey: string, hash: string): string {\n  try {\n    const { r, s, recovery } = secp256k1.sign(hexBytes(hash, 32, 'hash'), hexBytes(privateKey, 32, 'private key'), { lowS: true })\n    // viem serialises the trailing byte from yParity (0/1 → 27/28), the same\n    // `v` ethers' `Signature.serialized` writes.\n    return serializeSignature({\n      r: `0x${r.toString(16).padStart(64, '0')}`,\n      s: `0x${s.toString(16).padStart(64, '0')}`,\n      yParity: recovery,\n    })\n  } catch (err) {\n    throw new HavenSigningError(\n      `Failed to sign hash: ${err instanceof Error ? err.message : String(err)}`,\n    )\n  }\n}\n\nexport function verifySignature(hash: string, signature: string, expectedAddress: string): boolean {\n  try {\n    const sig = hexBytes(signature, 65, 'signature')\n    const hashHex = hexBytes(hash, 32, 'hash')\n    // Reject the high-s malleable twin, as ethers does — one signature per message.\n    if (BigInt(`0x${sig.slice(64, 128)}`) > HALF_N) return false\n    const yParityOrV = Number.parseInt(sig.slice(128), 16)\n    const recoveryBit = yParityOrV === 0 || yParityOrV === 27 ? 0 : yParityOrV === 1 || yParityOrV === 28 ? 1 : -1\n    if (recoveryBit < 0) return false\n    const publicKey = secp256k1.Signature.fromCompact(sig.slice(0, 128))\n      .addRecoveryBit(recoveryBit)\n      .recoverPublicKey(hashHex)\n      .toHex(false)\n    const recovered = publicKeyToAddress(`0x${publicKey}`)\n    return recovered.toLowerCase() === expectedAddress.toLowerCase()\n  } catch {\n    return false\n  }\n}\n","/**\n * Sub-budget child guards (#3330) — the SDK-side local verification the\n * signer runs before its delegate key signs a sub-budget child, mirroring\n * `task-budget-guards.ts`'s `assertOwnTaskChild` for the two-row sub-budget\n * tree. ONE verifier covers BOTH rows, because the same signer (the\n * delegating agent A's own key) signs both:\n *\n *  - A's PARENT-CHILD row: `delegate === delegator === A's own account`\n *    (self-delegated, the task-child shape class).\n *  - B's GRANT row: `delegator === A's own account`, `delegate === B's\n *    delegate account` (a real grant to another account).\n *\n * What makes a sub-budget child a sub-budget child (vs a task budget's\n * hard-cap child) is the AMOUNT caveat: an `ERC20PeriodTransferEnforcer`\n * caveat whose terms are `abi.encode(address token, uint256 periodAmount,\n * uint256 periodDuration, uint256 startDate)` — the period-scoped slice of\n * the parent's own period meter, with the parent's periodDuration and\n * startDate reused verbatim. A hard-cap `ERC20TransferAmountEnforcer` caveat\n * is refused: that would be a task budget, which this channel must never\n * sign (two different products, two different sign-context endpoints).\n *\n * Authority, timestamp and recipient-pin checks are byte-for-byte the\n * task-child discipline: authority must equal the declared parent hash and\n * never be ROOT; expiry must be in the future and equal the declared one; a\n * pinned recipient must match exactly, and an unpinned budget must not grow\n * one. Enforcers are the pinned constants from `settlement-child.ts` (no kit\n * dependency) — same reasoning as that file's header documents.\n */\n\nimport { type Address, type Hex } from 'viem'\nimport { HavenTypedDataRefusedError, DIRECT_PAYMENT_CHAIN_IDS } from './direct-payment-guard.js'\nimport { DELEGATION_MANAGER, ROOT_AUTHORITY, CAVEAT_ENFORCERS } from './settlement-child.js'\nimport { deriveDelegateAccountAddress } from './delegate-account.js'\nimport {\n  DELEGATION_TYPEHASH,\n  CAVEAT_TYPEHASH,\n  hashDelegation,\n  type DelegationForHashing,\n} from './task-budget-guards.js'\n\n/** The pinned `ERC20PeriodTransferEnforcer` (bytecode-identical on Base + Base Sepolia). */\nexport const ERC20_PERIOD_TRANSFER_ENFORCER = '0x474e3Ae7E169e940607cC624Da8A15Eb120139aB'\n\n/** The pinned `Delegation` EIP-712 domain (cross-checked by task-budget-guards' pin test). */\nconst DELEGATION_DOMAIN_NAME = 'DelegationManager'\nconst DELEGATION_DOMAIN_VERSION = '1'\n\n/** The pinned `types` shape, byte-identical to `task-budget-guards.ts`'s. */\nconst EXPECTED_DELEGATION_TYPES = {\n  Caveat: [\n    { name: 'enforcer', type: 'address' },\n    { name: 'terms', type: 'bytes' },\n  ],\n  Delegation: [\n    { name: 'delegate', type: 'address' },\n    { name: 'delegator', type: 'address' },\n    { name: 'authority', type: 'bytes32' },\n    { name: 'caveats', type: 'Caveat[]' },\n    { name: 'salt', type: 'uint256' },\n  ],\n} as const\n\nexport interface SubBudgetChildTypedData {\n  domain: { name?: string; version?: string; chainId?: number | string; verifyingContract?: string }\n  types: Record<string, unknown>\n  primaryType: string\n  message: Record<string, unknown>\n}\n\nfunction same(a: string | undefined, b: string | undefined): boolean {\n  return !!a && !!b && a.toLowerCase() === b.toLowerCase()\n}\n\n/** Byte slice [start, end) of a `0x…` string, as lowercase hex without prefix. */\nfunction sliceTerms(terms: string, start: number, end?: number): string {\n  const body = terms.startsWith('0x') ? terms.slice(2).toLowerCase() : terms.toLowerCase()\n  return end === undefined ? body.slice(start * 2) : body.slice(start * 2, end * 2)\n}\n\nfunction findCaveat(caveats: Array<{ enforcer: string; terms: string }>, enforcer: string) {\n  return caveats.find((c) => same(c.enforcer, enforcer))\n}\n\n/** The struct hash of a sub-budget child — the redemption chain's link value. */\nexport function hashSubBudgetDelegation(delegation: DelegationForHashing): Hex {\n  return hashDelegation(delegation)\n}\n\n// The kit's own struct hashes, re-exported verbatim from task-budget-guards'\n// pinned literals so a caller can name them from this module too.\nexport { DELEGATION_TYPEHASH, CAVEAT_TYPEHASH }\n\nexport interface SubBudgetChildExpectation {\n  chainId: number\n  tokenAddress: string\n  /** Per-period amount in atomic units — the child's periodAmount. */\n  periodAmountAtomic: string\n  /** The PARENT's period duration (seconds), reused verbatim in the caveat. */\n  periodDurationSeconds: number\n  /** The PARENT's period anchor, reused verbatim in the caveat. */\n  startDate: number\n  recipientAddress: string | null\n  /** unix seconds — the `TimestampEnforcer`'s `beforeThreshold`. */\n  expiresAt: number\n  /** The hash of the row's parent delegation (`parent_delegation_hash`). */\n  parentDelegationHash: string\n  /**\n   * A's own derived delegate account — the child's `delegator` on BOTH rows.\n   */\n  delegateAccount: string\n  /**\n   * The row's own `delegate`: A's account again for the parent-child row,\n   * B's delegate account for the grant row. Served in the sign-context's\n   * `expected` (read from the stored child JSON, not trusted caller input).\n   */\n  childDelegateAccount: string\n}\n\nfunction refuseSubBudgetChild(what: string, detail: string): never {\n  throw new HavenTypedDataRefusedError(\n    `Refusing to sign the sub-budget child: ${what}. ${detail} ` +\n      'This signature opens a slice of the delegating agent budget for another agent, so it is ' +\n      'verified locally against the expectation Haven declared, rather than trusted.',\n  )\n}\n\n/**\n * Verify a sub-budget child delegation is EXACTLY what\n * `GET /sub-budgets/:id/sign-context` (purpose `open`) declared, that its\n * `delegator` is this signer's own account, and that its `delegate` is the\n * declared child delegate. Throws `HavenTypedDataRefusedError` (never\n * returns) on any disagreement.\n */\nexport function assertOwnSubBudgetChild(\n  typedData: unknown,\n  expected: SubBudgetChildExpectation,\n  delegateAddress: string,\n  now: number = Date.now(),\n): void {\n  const td = typedData as SubBudgetChildTypedData\n  if (td?.primaryType !== 'Delegation') {\n    refuseSubBudgetChild('it is not a Delegation payload', `primaryType was '${String(td?.primaryType)}'.`)\n  }\n  if (!same(td.domain?.verifyingContract, DELEGATION_MANAGER)) {\n    refuseSubBudgetChild(\n      'the EIP-712 domain names an unknown DelegationManager',\n      `Expected ${DELEGATION_MANAGER}, got ${td.domain?.verifyingContract}.`,\n    )\n  }\n  if (td.domain?.name !== DELEGATION_DOMAIN_NAME || td.domain?.version !== DELEGATION_DOMAIN_VERSION) {\n    refuseSubBudgetChild(\n      'the EIP-712 domain name/version does not match the pinned DelegationManager domain',\n      `Expected name '${DELEGATION_DOMAIN_NAME}' version '${DELEGATION_DOMAIN_VERSION}'; got name ` +\n        `'${String(td.domain?.name)}' version '${String(td.domain?.version)}'.`,\n    )\n  }\n  if (\n    JSON.stringify(td.types?.Caveat) !== JSON.stringify(EXPECTED_DELEGATION_TYPES.Caveat) ||\n    JSON.stringify(td.types?.Delegation) !== JSON.stringify(EXPECTED_DELEGATION_TYPES.Delegation)\n  ) {\n    refuseSubBudgetChild(\n      'its EIP-712 type definitions do not match the pinned Delegation/Caveat shape',\n      'A renamed, reordered, or additional field on Delegation or Caveat could change what the ' +\n        'caveats below mean without changing this check\\'s field-by-field comparisons.',\n    )\n  }\n  const domainChain = Number(td.domain?.chainId)\n  if (!Number.isFinite(domainChain) || !DIRECT_PAYMENT_CHAIN_IDS.has(domainChain)) {\n    refuseSubBudgetChild(\n      'it is scoped to a chain the delegation rail has no pinned contracts for',\n      `Chains with pinned contracts: ${[...DIRECT_PAYMENT_CHAIN_IDS].join(', ')}; the child says ${String(td.domain?.chainId)}.`,\n    )\n  }\n  if (domainChain !== expected.chainId) {\n    refuseSubBudgetChild(\n      'it is scoped to the wrong chain',\n      `Expected chain ${expected.chainId}; the child says ${td.domain?.chainId}.`,\n    )\n  }\n\n  const ownAccount = deriveDelegateAccountAddress(delegateAddress as Address)\n  const delegator = td.message?.delegator\n  if (typeof delegator !== 'string' || !same(delegator, ownAccount)) {\n    refuseSubBudgetChild(\n      \"it is not delegated by this agent's own account\",\n      `Expected delegator ${ownAccount}; the child names ${String(delegator)}.`,\n    )\n  }\n  if (!same(delegator, expected.delegateAccount)) {\n    refuseSubBudgetChild(\n      'its delegator does not match the account Haven declared',\n      `Expected ${expected.delegateAccount}; the child names ${String(delegator)}.`,\n    )\n  }\n  const delegate = td.message?.delegate\n  if (typeof delegate !== 'string' || !same(delegate, expected.childDelegateAccount)) {\n    refuseSubBudgetChild(\n      'its delegate does not match the declared child delegate',\n      `Expected ${expected.childDelegateAccount}; the child names ${String(delegate)}.`,\n    )\n  }\n\n  const authority = td.message?.authority\n  if (typeof authority !== 'string' || !/^0x[0-9a-fA-F]{64}$/.test(authority)) {\n    refuseSubBudgetChild('its authority is not a 32-byte delegation hash', `Got ${String(authority)}.`)\n  }\n  if (authority.toLowerCase() === ROOT_AUTHORITY) {\n    refuseSubBudgetChild(\n      'it is a ROOT delegation, not a re-delegation of the delegating agent budget',\n      'A sub-budget always chains under the delegating agent budget delegation.',\n    )\n  }\n  if (!same(authority, expected.parentDelegationHash)) {\n    refuseSubBudgetChild(\n      'it chains under a different parent delegation',\n      `Expected authority ${expected.parentDelegationHash}; the child says ${authority}.`,\n    )\n  }\n\n  const caveats = (td.message?.caveats as Array<{ enforcer: string; terms: string }> | undefined) ?? []\n\n  // The PERIOD caveat is what makes this a sub-budget — a hard-cap\n  // `ERC20TransferAmountEnforcer` caveat is the task-budget shape and is\n  // refused on this channel.\n  if (findCaveat(caveats, CAVEAT_ENFORCERS.erc20TransferAmount)) {\n    refuseSubBudgetChild(\n      'it carries a hard-cap transfer-amount caveat (the task-budget shape)',\n      'A sub-budget is period-scoped: its amount caveat must be an ERC20PeriodTransferEnforcer ' +\n        'caveat slicing the parent period meter, never a lifetime cap.',\n    )\n  }\n  const period = findCaveat(caveats, ERC20_PERIOD_TRANSFER_ENFORCER)\n  if (!period) {\n    refuseSubBudgetChild(\n      'it has no ERC-20 period-transfer caveat',\n      'Without it the child is not bounded to a per-period amount.',\n    )\n  }\n  // terms = abi.encodePacked(address token, uint256 periodAmount,\n  // uint256 periodDuration, uint256 startDate) — the kit's TIGHT packing\n  // (20 + 32×3 = 116 bytes, verified against `createDelegation`'s own\n  // output), the same layout `task-budget-guards.ts` decodes for the\n  // ERC20TransferAmountEnforcer. NOT head/tail-padded words: the address\n  // occupies bytes [0,20) and the amount starts at byte 20.\n  const token = `0x${sliceTerms(period.terms, 0, 20)}`\n  if (!same(token, expected.tokenAddress)) {\n    refuseSubBudgetChild('it spends a different token', `Expected ${expected.tokenAddress}, child pins ${token}.`)\n  }\n  const periodAmount = BigInt(`0x${sliceTerms(period.terms, 20, 52)}`)\n  if (periodAmount !== BigInt(expected.periodAmountAtomic)) {\n    refuseSubBudgetChild(\n      'the period amount does not match',\n      `Expected ${expected.periodAmountAtomic}; the child allows ${periodAmount.toString()}.`,\n    )\n  }\n  const periodDuration = Number(BigInt(`0x${sliceTerms(period.terms, 52, 84)}`))\n  if (periodDuration !== expected.periodDurationSeconds) {\n    refuseSubBudgetChild(\n      'its period duration does not match the parent window Haven declared',\n      `Expected ${expected.periodDurationSeconds}s; the child says ${periodDuration}s. A sub-budget is a ` +\n        'slice of the parent period meter — same window, smaller amount — never a different clock.',\n    )\n  }\n  const startDate = Number(BigInt(`0x${sliceTerms(period.terms, 84, 116)}`))\n  if (startDate !== expected.startDate) {\n    refuseSubBudgetChild(\n      'its period start does not match the parent anchor Haven declared',\n      `Expected ${expected.startDate}; the child says ${startDate}.`,\n    )\n  }\n\n  const timestamp = findCaveat(caveats, CAVEAT_ENFORCERS.timestamp)\n  if (!timestamp) {\n    refuseSubBudgetChild('it never expires', 'A sub-budget child without a timestamp caveat is open-ended.')\n  }\n  const beforeThreshold = Number(BigInt(`0x${sliceTerms(timestamp.terms, 16, 32)}`))\n  const nowSec = Math.floor(now / 1000)\n  if (beforeThreshold <= nowSec) {\n    refuseSubBudgetChild('it has already expired', `Expiry ${beforeThreshold} is not in the future.`)\n  }\n  if (beforeThreshold !== expected.expiresAt) {\n    refuseSubBudgetChild(\n      'its expiry does not match what Haven declared',\n      `Expected ${expected.expiresAt}; the child says ${beforeThreshold}.`,\n    )\n  }\n\n  const calldata = findCaveat(caveats, CAVEAT_ENFORCERS.allowedCalldata)\n  if (expected.recipientAddress) {\n    if (!calldata) {\n      refuseSubBudgetChild(\n        'it has no recipient pin',\n        'The sub-budget was issued with a pinned recipient, so the child must carry one.',\n      )\n    }\n    const startIndex = BigInt(`0x${sliceTerms(calldata.terms, 0, 32)}`)\n    if (startIndex !== 4n) {\n      refuseSubBudgetChild(\n        'the recipient pin points at the wrong calldata offset',\n        `Expected offset 4, got ${startIndex.toString()}.`,\n      )\n    }\n    const paddedRecipient = sliceTerms(calldata.terms, 32, 64)\n    if (paddedRecipient.slice(0, 24) !== '0'.repeat(24)) {\n      refuseSubBudgetChild('the pinned recipient is not a plain address', 'Its 32-byte word is not a padded address.')\n    }\n    const recipient = `0x${paddedRecipient.slice(24)}`\n    if (!same(recipient, expected.recipientAddress)) {\n      refuseSubBudgetChild(\n        'it pins a different recipient than Haven declared',\n        `Expected ${expected.recipientAddress}; the child pins ${recipient}.`,\n      )\n    }\n  } else if (calldata) {\n    refuseSubBudgetChild(\n      'it pins a recipient the sub-budget was not issued with',\n      'This sub-budget is open (no recipient pin); the child must not add one.',\n    )\n  }\n}\n\n/** Close UserOp verification — byte-for-byte the task-budget discipline. */\nexport function assertOwnSubBudgetCloseUserOp(\n  typedData: Record<string, unknown>,\n  expected: { delegationHash: string },\n  delegateAddress: string,\n): void {\n  // The close UserOp shape is identical to the task budget's: a\n  // disableDelegation(child) call from the agent's own delegate account.\n  // Reuse the task-budget verifier — the only expectation that differs is\n  // the delegation hash, which is an input here either way. Static import,\n  // not lazy: these modules share no init-time cycle.\n  assertOwnTaskBudgetCloseUserOp(typedData, expected, delegateAddress)\n}\n\n// The close-UserOp verifier is imported for the re-export above.\nimport { assertOwnTaskBudgetCloseUserOp } from './task-budget-guards.js'\n"]}