@haven_ai/signer 0.2.1-alpha.0 → 0.3.0-alpha.0

package/dist/index.d.cts

@@ -282,18 +282,8 @@ declare function signerInstructions(): string;
 interface SignerCredentials {
     delegateKey: string;
     agentId?: string;
-    /**
-     * The Haven account (smart account) the agent spends from — #2908, the
-     * account-vocabulary name. Same value as `safeAddress`.
-     */
+    /** The Haven account (smart account) the agent spends from. */
     accountAddress?: string;
-    /**
-     * @deprecated #2908 — same value as {@link SignerCredentials.accountAddress}.
-     * Removed from this shape in the release after the one carrying #2908
-     * (#2914). The credential-FILE keys it was read from are a different
-     * matter — see `readAccountAddressField`.
-     */
-    safeAddress?: string;
     chainId?: number;
     network?: string;
     x402BindingSigner?: string;
@@ -305,11 +295,11 @@ interface RawCredentialFile {
     delegateKey?: unknown;
     agent_id?: unknown;
     agentId?: unknown;
-    /** #2908: what `@haven_ai/connect` writes from this release on. */
+    /** What `@haven_ai/connect` writes. */
     account_address?: unknown;
-    /** Pre-#2908 spelling — read PERMANENTLY, see `readAccountAddressField`. */
+    /** Pre-#2908 spelling — read PERMANENTLY (a credential file never rewrites itself), see `readAccountAddressField`. */
     safe_address?: unknown;
-    /** Pre-#2908 spelling — read PERMANENTLY, see `readAccountAddressField`. */
+    /** Pre-#2908 spelling — read PERMANENTLY (a credential file never rewrites itself), see `readAccountAddressField`. */
     safeAddress?: unknown;
     chain_id?: unknown;
     chainId?: unknown;
@@ -346,11 +336,11 @@ declare function loadSignerCredentials(path?: string | undefined): Promise<Signe
  */
 declare function readAccountAddressField(raw: Pick<RawCredentialFile, 'account_address' | 'safe_address' | 'safeAddress'>): string | undefined;
 /**
- * The account address off the process environment, new name first:
- * `HAVEN_ACCOUNT_ADDRESS` (the survivor, decided on #2906) then the two
- * names the dashboard handoff emitted before #2908 — `HAVEN_WALLET_ADDRESS`
- * and `HAVEN_SAFE_ADDRESS`. Unlike the file fallbacks these two ARE
- * window-scoped: they are dropped at #2914, one release after this one.
+ * The account address off the process environment: `HAVEN_ACCOUNT_ADDRESS`
+ * (the survivor, decided on #2906). The two names the dashboard handoff
+ * emitted before #2908 — `HAVEN_WALLET_ADDRESS` and `HAVEN_SAFE_ADDRESS` —
+ * were window-scoped (unlike the credential-FILE fallbacks) and are retired
+ * as of #2914.
  */
 declare function readAccountAddressEnv(env: NodeJS.ProcessEnv): string | undefined;
 /**
@@ -368,12 +358,20 @@ interface SigningAuditEntry {
     tool: SignerToolName;
     payload_hash: string;
     delegate_address: string;
+    /**
+     * Serialized key kept as `safe_address` deliberately (#2914 review): this
+     * is a persisted JSONL field, and an audit log written by an earlier
+     * release never rewrites itself — renaming the key here would fork the
+     * format mid-file. `SigningAuditContext.accountAddress` (the in-memory
+     * field this is built from) carries the account-vocabulary name; only the
+     * on-disk spelling stays put.
+     */
     safe_address?: string;
     chain_id?: number;
 }
 interface SigningAuditContext {
     delegateAddress: string;
-    safeAddress?: string;
+    accountAddress?: string;
     chainId?: number;
     auditPath?: string;
 }
@@ -451,7 +449,7 @@ declare function createToolHandlers(signer: EdgeSigner, options?: ToolHandlerOpt
 
 interface SignerConsentInput {
     delegateAddress: string;
-    safeAddress?: string;
+    accountAddress?: string;
     agentId?: string;
     chainId?: number;
     network?: string;
@@ -476,7 +474,7 @@ declare function renderSignerConsentBlock(input: SignerConsentInput, hash: strin
 declare function ensureSignerConsent(input: SignerConsentInput, options?: SignerConsentOptions): Promise<SignerConsentDecision>;
 
 declare const SIGNER_NAME = "@haven_ai/signer";
-declare const SIGNER_VERSION = "0.2.1-alpha.0";
+declare const SIGNER_VERSION = "0.3.0-alpha.0";
 interface SignerOptions {
     /** Path to a Haven credential JSON file (delegate_key is read from it). */
     credentialsPath?: string;

package/dist/index.d.ts

@@ -282,18 +282,8 @@ declare function signerInstructions(): string;
 interface SignerCredentials {
     delegateKey: string;
     agentId?: string;
-    /**
-     * The Haven account (smart account) the agent spends from — #2908, the
-     * account-vocabulary name. Same value as `safeAddress`.
-     */
+    /** The Haven account (smart account) the agent spends from. */
     accountAddress?: string;
-    /**
-     * @deprecated #2908 — same value as {@link SignerCredentials.accountAddress}.
-     * Removed from this shape in the release after the one carrying #2908
-     * (#2914). The credential-FILE keys it was read from are a different
-     * matter — see `readAccountAddressField`.
-     */
-    safeAddress?: string;
     chainId?: number;
     network?: string;
     x402BindingSigner?: string;
@@ -305,11 +295,11 @@ interface RawCredentialFile {
     delegateKey?: unknown;
     agent_id?: unknown;
     agentId?: unknown;
-    /** #2908: what `@haven_ai/connect` writes from this release on. */
+    /** What `@haven_ai/connect` writes. */
     account_address?: unknown;
-    /** Pre-#2908 spelling — read PERMANENTLY, see `readAccountAddressField`. */
+    /** Pre-#2908 spelling — read PERMANENTLY (a credential file never rewrites itself), see `readAccountAddressField`. */
     safe_address?: unknown;
-    /** Pre-#2908 spelling — read PERMANENTLY, see `readAccountAddressField`. */
+    /** Pre-#2908 spelling — read PERMANENTLY (a credential file never rewrites itself), see `readAccountAddressField`. */
     safeAddress?: unknown;
     chain_id?: unknown;
     chainId?: unknown;
@@ -346,11 +336,11 @@ declare function loadSignerCredentials(path?: string | undefined): Promise<Signe
  */
 declare function readAccountAddressField(raw: Pick<RawCredentialFile, 'account_address' | 'safe_address' | 'safeAddress'>): string | undefined;
 /**
- * The account address off the process environment, new name first:
- * `HAVEN_ACCOUNT_ADDRESS` (the survivor, decided on #2906) then the two
- * names the dashboard handoff emitted before #2908 — `HAVEN_WALLET_ADDRESS`
- * and `HAVEN_SAFE_ADDRESS`. Unlike the file fallbacks these two ARE
- * window-scoped: they are dropped at #2914, one release after this one.
+ * The account address off the process environment: `HAVEN_ACCOUNT_ADDRESS`
+ * (the survivor, decided on #2906). The two names the dashboard handoff
+ * emitted before #2908 — `HAVEN_WALLET_ADDRESS` and `HAVEN_SAFE_ADDRESS` —
+ * were window-scoped (unlike the credential-FILE fallbacks) and are retired
+ * as of #2914.
  */
 declare function readAccountAddressEnv(env: NodeJS.ProcessEnv): string | undefined;
 /**
@@ -368,12 +358,20 @@ interface SigningAuditEntry {
     tool: SignerToolName;
     payload_hash: string;
     delegate_address: string;
+    /**
+     * Serialized key kept as `safe_address` deliberately (#2914 review): this
+     * is a persisted JSONL field, and an audit log written by an earlier
+     * release never rewrites itself — renaming the key here would fork the
+     * format mid-file. `SigningAuditContext.accountAddress` (the in-memory
+     * field this is built from) carries the account-vocabulary name; only the
+     * on-disk spelling stays put.
+     */
     safe_address?: string;
     chain_id?: number;
 }
 interface SigningAuditContext {
     delegateAddress: string;
-    safeAddress?: string;
+    accountAddress?: string;
     chainId?: number;
     auditPath?: string;
 }
@@ -451,7 +449,7 @@ declare function createToolHandlers(signer: EdgeSigner, options?: ToolHandlerOpt
 
 interface SignerConsentInput {
     delegateAddress: string;
-    safeAddress?: string;
+    accountAddress?: string;
     agentId?: string;
     chainId?: number;
     network?: string;
@@ -476,7 +474,7 @@ declare function renderSignerConsentBlock(input: SignerConsentInput, hash: strin
 declare function ensureSignerConsent(input: SignerConsentInput, options?: SignerConsentOptions): Promise<SignerConsentDecision>;
 
 declare const SIGNER_NAME = "@haven_ai/signer";
-declare const SIGNER_VERSION = "0.2.1-alpha.0";
+declare const SIGNER_VERSION = "0.3.0-alpha.0";
 interface SignerOptions {
     /** Path to a Haven credential JSON file (delegate_key is read from it). */
     credentialsPath?: string;

package/dist/index.js

@@ -506,7 +506,6 @@ async function loadSignerCredentials(path = process.env.HAVEN_CREDENTIALS) {
       delegateKey: envKey,
       agentId: stringField(process.env.HAVEN_AGENT_ID),
       accountAddress,
-      safeAddress: accountAddress,
       chainId: chainIdField(process.env.HAVEN_CHAIN_ID, "HAVEN_CHAIN_ID"),
       network: stringField(process.env.HAVEN_NETWORK),
       x402BindingSigner: stringField(process.env.HAVEN_X402_BINDING_SIGNER)
@@ -541,7 +540,6 @@ async function loadFromFile(path) {
     delegateKey,
     agentId: stringField(raw.agent_id ?? raw.agentId),
     accountAddress,
-    safeAddress: accountAddress,
     chainId: chainIdField(raw.chain_id ?? raw.chainId, "chain_id"),
     network: stringField(raw.network),
     x402BindingSigner: stringField(
@@ -554,7 +552,22 @@ function readAccountAddressField(raw) {
   return stringField(raw.account_address ?? raw.safe_address ?? raw.safeAddress);
 }
 function readAccountAddressEnv(env) {
-  return stringField(env.HAVEN_ACCOUNT_ADDRESS ?? env.HAVEN_WALLET_ADDRESS ?? env.HAVEN_SAFE_ADDRESS);
+  const current = stringField(env.HAVEN_ACCOUNT_ADDRESS);
+  for (const name of ["HAVEN_WALLET_ADDRESS", "HAVEN_SAFE_ADDRESS"]) {
+    const retired = stringField(env[name]);
+    if (!retired) continue;
+    if (!current) {
+      throw new Error(
+        `${name} is retired (#2906) \u2014 Haven accounts are addressed as accounts, not Safes. Set HAVEN_ACCOUNT_ADDRESS to the same value. Refusing rather than ignoring it, because an unset account address silently skips the sweep-destination check.`
+      );
+    }
+    if (retired.toLowerCase() !== current.toLowerCase()) {
+      throw new Error(
+        `${name} and HAVEN_ACCOUNT_ADDRESS were both set to different addresses. Remove the retired name, or make them match \u2014 picking one silently would hide the mismatch.`
+      );
+    }
+  }
+  return current;
 }
 function stringField(value) {
   return typeof value === "string" && value.trim() ? value.trim() : void 0;
@@ -611,7 +624,7 @@ function createSigningAuditEntry(tool, payloadHash, context, now = /* @__PURE__
     payload_hash: payloadHash,
     delegate_address: context.delegateAddress
   };
-  if (context.safeAddress) entry.safe_address = context.safeAddress;
+  if (context.accountAddress) entry.safe_address = context.accountAddress;
   if (typeof context.chainId === "number") entry.chain_id = context.chainId;
   return entry;
 }
@@ -1078,7 +1091,7 @@ function createToolHandlers(signer, options = {}) {
         authorization: args.authorization,
         expectedAuth: args.expected_auth,
         // Cross-check `to` against the Safe in the local credential when present.
-        expectedSafe: options.audit?.safeAddress
+        expectedSafe: options.audit?.accountAddress
       });
       await auditSigning(
         "haven_sign_sweep_delegate",
@@ -1203,7 +1216,7 @@ var SIGNER_CONSENT_SURFACE_VERSION = 2;
 function computeSignerConsentHash(input) {
   const identity = [
     input.delegateAddress.toLowerCase(),
-    (input.safeAddress ?? "").toLowerCase(),
+    (input.accountAddress ?? "").toLowerCase(),
     input.agentId ?? "",
     input.chainId ?? "",
     input.network ?? ""
@@ -1222,7 +1235,7 @@ function renderSignerConsentBlock(input, hash) {
     "",
     `Delegate address: ${input.delegateAddress}`
   ];
-  lines.push(`Haven wallet:     ${input.safeAddress ?? "not provided to this signer"}`);
+  lines.push(`Haven wallet:     ${input.accountAddress ?? "not provided to this signer"}`);
   if (input.agentId) lines.push(`Agent ID:         ${input.agentId}`);
   if (typeof input.chainId === "number") lines.push(`Chain ID:         ${input.chainId}`);
   if (input.network) lines.push(`Network:          ${input.network}`);
@@ -1316,7 +1329,7 @@ async function writeAckFile(path, hash) {
   );
 }
 var SIGNER_NAME = "@haven_ai/signer";
-var SIGNER_VERSION = "0.2.1-alpha.0";
+var SIGNER_VERSION = "0.3.0-alpha.0";
 async function resolveEdgeSigner(options = {}) {
   const { signer } = await resolveSignerRuntime(options);
   return signer;
@@ -1355,7 +1368,7 @@ function buildSignerMcpServer(signer, options = {}) {
     audit: {
       auditPath: options.auditPath ?? defaultSigningAuditPath(credentialsPath),
       delegateAddress: signer.delegateAddress,
-      safeAddress: options.credentials?.accountAddress ?? options.credentials?.safeAddress,
+      accountAddress: options.credentials?.accountAddress,
       chainId: options.credentials?.chainId
     },
     // #1263: the payment_id signing path — the ONLY network call this server
@@ -1405,7 +1418,7 @@ async function runSignerConsentGate(signer, credentials, options) {
   return ensureSignerConsent(
     {
       delegateAddress: signer.delegateAddress,
-      safeAddress: credentials?.accountAddress ?? credentials?.safeAddress,
+      accountAddress: credentials?.accountAddress,
       agentId: credentials?.agentId,
       chainId: credentials?.chainId,
       network: credentials?.network,