@haven_ai/signer 0.1.37-alpha.0 → 0.2.0-alpha.0

package/README.md

@@ -186,8 +186,11 @@ what a payload means; they re-derive it.
   `from` check is unconditional. The **destination** check is not, and this is
   the one asymmetry in this list: the signer compares the sweep's `to` against
   the account address **only when the local credential records one**
-  (`safe_address`). Run with `HAVEN_DELEGATE_KEY` alone — or with a credential
-  whose `safe_address` is absent — and there is no local value to compare
+  (`account_address`, or the pre-#2908 `safe_address` / `safeAddress`, which
+  are read permanently; from the environment, `HAVEN_ACCOUNT_ADDRESS`, or the
+  older `HAVEN_WALLET_ADDRESS` / `HAVEN_SAFE_ADDRESS` until #2914). Run with
+  `HAVEN_DELEGATE_KEY` alone — or with a credential
+  whose account address is absent — and there is no local value to compare
   against, so the destination is authenticated by Haven's binding signature and
   the token/chain canonicality check, but not independently re-derived. Prefer
   a credential file that carries the account address.

package/dist/cli.cjs

@@ -1151,10 +1151,12 @@ async function loadSignerCredentials(path = process.env.HAVEN_CREDENTIALS) {
   if (path) return loadFromFile(path);
   const envKey = stringField(process.env.HAVEN_DELEGATE_KEY);
   if (envKey) {
+    const accountAddress = readAccountAddressEnv(process.env);
     return {
       delegateKey: envKey,
       agentId: stringField(process.env.HAVEN_AGENT_ID),
-      safeAddress: stringField(process.env.HAVEN_SAFE_ADDRESS),
+      accountAddress,
+      safeAddress: accountAddress,
       chainId: chainIdField(process.env.HAVEN_CHAIN_ID, "HAVEN_CHAIN_ID"),
       network: stringField(process.env.HAVEN_NETWORK),
       x402BindingSigner: stringField(process.env.HAVEN_X402_BINDING_SIGNER)
@@ -1184,10 +1186,12 @@ async function loadFromFile(path) {
   if (!delegateKey) {
     throw new Error("Haven credentials are missing delegate_key \u2014 the edge signer needs it to sign.");
   }
+  const accountAddress = readAccountAddressField(raw);
   return {
     delegateKey,
     agentId: stringField(raw.agent_id ?? raw.agentId),
-    safeAddress: stringField(raw.safe_address ?? raw.safeAddress),
+    accountAddress,
+    safeAddress: accountAddress,
     chainId: chainIdField(raw.chain_id ?? raw.chainId, "chain_id"),
     network: stringField(raw.network),
     x402BindingSigner: stringField(
@@ -1196,6 +1200,12 @@ async function loadFromFile(path) {
     sourcePath: path
   };
 }
+function readAccountAddressField(raw) {
+  return stringField(raw.account_address ?? raw.safe_address ?? raw.safeAddress);
+}
+function readAccountAddressEnv(env) {
+  return stringField(env.HAVEN_ACCOUNT_ADDRESS ?? env.HAVEN_WALLET_ADDRESS ?? env.HAVEN_SAFE_ADDRESS);
+}
 function stringField(value) {
   return typeof value === "string" && value.trim() ? value.trim() : void 0;
 }
@@ -1237,7 +1247,7 @@ async function warnIfCredentialFilePermissive(path, log = (message) => process.s
 
 // src/server.ts
 var SIGNER_NAME = "@haven_ai/signer";
-var SIGNER_VERSION = "0.1.37-alpha.0";
+var SIGNER_VERSION = "0.2.0-alpha.0";
 async function resolveSignerRuntime(options = {}) {
   assertSupportedNodeVersion(options.nodeVersion);
   if (options.delegateKey) {
@@ -1272,7 +1282,7 @@ function buildSignerMcpServer(signer, options = {}) {
     audit: {
       auditPath: options.auditPath ?? defaultSigningAuditPath(credentialsPath),
       delegateAddress: signer.delegateAddress,
-      safeAddress: options.credentials?.safeAddress,
+      safeAddress: options.credentials?.accountAddress ?? options.credentials?.safeAddress,
       chainId: options.credentials?.chainId
     },
     // #1263: the payment_id signing path — the ONLY network call this server
@@ -1322,7 +1332,7 @@ async function runSignerConsentGate(signer, credentials, options) {
   return ensureSignerConsent(
     {
       delegateAddress: signer.delegateAddress,
-      safeAddress: credentials?.safeAddress,
+      safeAddress: credentials?.accountAddress ?? credentials?.safeAddress,
       agentId: credentials?.agentId,
       chainId: credentials?.chainId,
       network: credentials?.network,