@haven_ai/signer 0.1.21-alpha.0 → 0.1.22-alpha.0

package/dist/cli.cjs

@@ -238,9 +238,16 @@ var SUPPORTED_SWEEP_BINDING_VERSIONS = [1];
 function assertSupportedBindingVersion(received, supported, context) {
   if (supported.includes(received)) return;
   const highest = Math.max(...supported);
-  const ceiling = received > highest ? `This signer is out of date: it supports ${context} versions up to ${highest}, and Haven sent version ${received}. Update @haven_ai/signer \u2014 rerun the Haven connector (\`npx @haven_ai/connect@alpha\`), which reinstalls the pinned MCP runtime.` : `Unsupported ${context} version ${received}: this signer supports ${supported.join(", ")}.`;
-  throw new sdk.HavenSigningError(
-    `${ceiling} Nothing was signed. Do not rewrite the version field to a supported value: it is part of the Haven-signed binding message, so changing it invalidates the signature and would misrepresent what Haven authorised.`
+  const outOfDate = received > highest;
+  const code = context === "x402 expected context" ? sdk.SignerRefusalCode.UnsupportedExpectedContextVersion : sdk.SignerRefusalCode.UnsupportedSweepBindingVersion;
+  const ceiling = outOfDate ? `This signer is out of date: it supports ${context} versions up to ${highest}, and Haven sent version ${received}. Update @haven_ai/signer \u2014 rerun the Haven connector (\`npx @haven_ai/connect@alpha\`), which reinstalls the pinned MCP runtime.` : `Unsupported ${context} version ${received}: this signer supports ${supported.join(", ")}.`;
+  const fallback = outOfDate ? sdk.SIGNER_UPDATE_FALLBACK : `This ${context} version (${received}) is older than what this signer enforces (${supported.join(", ")}) \u2014 updating @haven_ai/signer will not restore it. Nothing was signed or spent; stop and tell the user rather than retrying.`;
+  throw new sdk.HavenUnsupportedSignerVersionError(
+    `${ceiling} Nothing was signed. Do not rewrite the version field to a supported value: it is part of the Haven-signed binding message, so changing it invalidates the signature and would misrepresent what Haven authorised.`,
+    code,
+    supported,
+    received,
+    fallback
   );
 }
 function assertExpectedBinding(payloadHash, expected, trustedSigner, mode = "hash") {
@@ -339,7 +346,11 @@ function signerInstructions() {
     "above, this signer is out of date: STOP before signing, and tell the user to update",
     "@haven_ai/signer by rerunning `npx @haven_ai/connect@alpha`, which reinstalls the pinned",
     "MCP runtime. Do not edit the version field to a supported value \u2014 it is part of the",
-    "Haven-signed binding message, so changing it invalidates the signature."
+    "Haven-signed binding message, so changing it invalidates the signature.",
+    "",
+    "A version-mismatch refusal from haven_sign / haven_sign_x402 / haven_sign_sweep_delegate is",
+    "machine-readable, not just prose: it carries code, supported_versions, received_version, and",
+    "fallback fields alongside the message, so you can branch on it directly."
   ].join("\n");
 }
 async function loadHavenIdentity(credentialsPath) {
@@ -763,6 +774,17 @@ function normalizeError(err) {
       statusCode: 400
     };
   }
+  if (err instanceof sdk.HavenUnsupportedSignerVersionError) {
+    return {
+      success: false,
+      code: err.code,
+      message: err.message,
+      supported_versions: [...err.supportedVersions],
+      received_version: err.receivedVersion,
+      fallback: err.fallback,
+      next_action: sdk.AgentPaymentNextAction.StopAndTellUser
+    };
+  }
   if (err instanceof sdk.HavenSigningError) {
     return { success: false, code: err.code, message: err.message };
   }
@@ -998,7 +1020,7 @@ async function warnIfCredentialFilePermissive(path, log = (message) => process.s
 
 // src/server.ts
 var SIGNER_NAME = "@haven_ai/signer";
-var SIGNER_VERSION = "0.1.21-alpha.0";
+var SIGNER_VERSION = "0.1.22-alpha.0";
 async function resolveSignerRuntime(options = {}) {
   assertSupportedNodeVersion(options.nodeVersion);
   if (options.delegateKey) {