@haven_ai/signer 0.7.0-alpha.0 → 0.8.1-alpha.0

package/dist/index.d.cts

@@ -258,6 +258,13 @@ interface SignerCompatibility {
      * discipline as `direct_sign_context_versions`.
      */
     task_sign_context_versions: number[];
+    /**
+     * #3506: `sub_budget_sign_context_version`s this signer will fetch and
+     * verify from `GET /sub-budgets/:id/sign-context` — derived from
+     * `SUPPORTED_SUB_BUDGET_SIGN_CONTEXT_VERSIONS`, never a second literal.
+     * Additive: 0.7.0 already signed sub-budgets but did not say so here.
+     */
+    sub_budget_sign_context_versions: number[];
 }
 /** The supported sets this signer enforces, as a plain serialisable object. */
 declare function signerCompatibility(): SignerCompatibility;
@@ -486,6 +493,14 @@ declare const SIGNER_HOSTED_HANDOFF_SHAPES: {
     readonly haven_get_payment_status: {
         readonly payment_id: z.ZodString;
     };
+    readonly 'haven_submit#task_budget': {
+        readonly task_budget_id: z.ZodString;
+        readonly signature: z.ZodString;
+    };
+    readonly 'haven_submit#sub_budget': {
+        readonly sub_budget_id: z.ZodString;
+        readonly signature: z.ZodString;
+    };
 };
 
 /**
@@ -495,7 +510,7 @@ declare const SIGNER_HOSTED_HANDOFF_SHAPES: {
  * `server.ts` re-exports them, so the package's public API is unchanged.
  */
 declare const SIGNER_NAME = "@haven_ai/signer";
-declare const SIGNER_VERSION = "0.7.0-alpha.0";
+declare const SIGNER_VERSION = "0.8.1-alpha.0";
 /**
  * #3419: the marker the tool layer prefixes the undeclared-argument refusal
  * with. The strict re-parse lives in THIS module (`parseStrictFor`, below) —

package/dist/index.d.ts

@@ -258,6 +258,13 @@ interface SignerCompatibility {
      * discipline as `direct_sign_context_versions`.
      */
     task_sign_context_versions: number[];
+    /**
+     * #3506: `sub_budget_sign_context_version`s this signer will fetch and
+     * verify from `GET /sub-budgets/:id/sign-context` — derived from
+     * `SUPPORTED_SUB_BUDGET_SIGN_CONTEXT_VERSIONS`, never a second literal.
+     * Additive: 0.7.0 already signed sub-budgets but did not say so here.
+     */
+    sub_budget_sign_context_versions: number[];
 }
 /** The supported sets this signer enforces, as a plain serialisable object. */
 declare function signerCompatibility(): SignerCompatibility;
@@ -486,6 +493,14 @@ declare const SIGNER_HOSTED_HANDOFF_SHAPES: {
     readonly haven_get_payment_status: {
         readonly payment_id: z.ZodString;
     };
+    readonly 'haven_submit#task_budget': {
+        readonly task_budget_id: z.ZodString;
+        readonly signature: z.ZodString;
+    };
+    readonly 'haven_submit#sub_budget': {
+        readonly sub_budget_id: z.ZodString;
+        readonly signature: z.ZodString;
+    };
 };
 
 /**
@@ -495,7 +510,7 @@ declare const SIGNER_HOSTED_HANDOFF_SHAPES: {
  * `server.ts` re-exports them, so the package's public API is unchanged.
  */
 declare const SIGNER_NAME = "@haven_ai/signer";
-declare const SIGNER_VERSION = "0.7.0-alpha.0";
+declare const SIGNER_VERSION = "0.8.1-alpha.0";
 /**
  * #3419: the marker the tool layer prefixes the undeclared-argument refusal
  * with. The strict re-parse lives in THIS module (`parseStrictFor`, below) —

package/dist/index.js

@@ -349,7 +349,14 @@ function sameAddress(a, b) {
   return a.toLowerCase() === b.toLowerCase();
 }
 var SIGNER_HOSTED_HANDOFF_SHAPES = {
-  haven_get_payment_status: { payment_id: z.string().min(1) }
+  haven_get_payment_status: { payment_id: z.string().min(1) },
+  // #3506: `haven_sign` hands a signed budget row to the hosted `haven_submit`
+  // (`signTaskBudget` / `signSubBudget` in tools.ts emit exactly these
+  // `next_arguments`). One hosted tool, two argument shapes, so each shape is
+  // its own entry keyed `<hosted tool>#<variant>`; the parity test reads the
+  // part before `#` as the hosted tool it checks the entry against.
+  "haven_submit#task_budget": { task_budget_id: z.string().min(1), signature: z.string().regex(/^0x[0-9a-fA-F]+$/) },
+  "haven_submit#sub_budget": { sub_budget_id: z.string().min(1), signature: z.string().regex(/^0x[0-9a-fA-F]+$/) }
 };
 function target(shape) {
   const schema = z.object(shape).strict();
@@ -380,7 +387,8 @@ function nextStepWireFields(step) {
 }
 
 // src/sign-context.ts
-var DIRECT_RELAY_FALLBACK = "call haven_sign with payload_hash and typed_data_b64 from the haven_send / haven_pay result, passed through unchanged";
+var DIRECT_RELAY_FALLBACK = "re-run whichever of haven_send / haven_pay you called, with the SAME idempotency_key (echoed on its result) plus include_signing_payload: true, then call haven_sign with payload_hash and typed_data_b64 from THAT re-run's result, passed through unchanged";
+var DIRECT_404_FALLBACK = "either the payment_id is not from this agent\u2019s own POST /payments call, or this Haven backend predates #3271 (which also predates #3495, so its result already carries payload_hash and typed_data_b64 unconditionally): pass those fields from the ORIGINAL haven_send / haven_pay result, unchanged, if it already carries them \u2014 or, on a newer server, re-run haven_send / haven_pay with the SAME idempotency_key plus include_signing_payload: true and pass them from THAT result instead";
 var HavenSignContextError = class extends HavenSigningError {
   /**
    * #3001 / #3010 review: the recovery path, when signing OTHER bytes is
@@ -458,7 +466,7 @@ var HavenSignContextError = class extends HavenSigningError {
         step = signerRefusalStep({
           nextAction: AgentPaymentNextAction.StopAndTellUser,
           nextTool: null,
-          nextToolOmittedReason: DIRECT_RELAY_FALLBACK
+          nextToolOmittedReason: DIRECT_404_FALLBACK
         });
       } else if (flow === "direct" && refusal?.errorCode === "expired") {
         this.next_action = AgentPaymentNextAction.PaymentWindowExpired;
@@ -613,7 +621,7 @@ async function fetchDirectSignContext(identity, paymentId, fetchImpl = fetch, ti
   } catch (err) {
     const timedOut = err instanceof Error && (err.name === "TimeoutError" || err.name === "AbortError");
     throw new HavenSignContextError(
-      timedOut ? `Haven did not answer the direct-payment signing-context fetch for ${paymentId} within ${timeoutMs} ms. Retry, or pass typed_data_b64 from the payment result instead.` : `Could not reach Haven to fetch the direct-payment signing context for ${paymentId}: ${err instanceof Error ? err.message : String(err)}. Retry, or pass typed_data_b64 from the payment result instead.`,
+      timedOut ? `Haven did not answer the direct-payment signing-context fetch for ${paymentId} within ${timeoutMs} ms. Retry, or re-run haven_send / haven_pay with the same idempotency_key plus include_signing_payload: true and pass typed_data_b64 from that result instead.` : `Could not reach Haven to fetch the direct-payment signing context for ${paymentId}: ${err instanceof Error ? err.message : String(err)}. Retry, or re-run haven_send / haven_pay with the same idempotency_key plus include_signing_payload: true and pass typed_data_b64 from that result instead.`,
       timedOut ? "SIGN_CONTEXT_TIMEOUT" : "SIGN_CONTEXT_UNREACHABLE",
       void 0,
       paymentId,
@@ -626,7 +634,7 @@ async function fetchDirectSignContext(identity, paymentId, fetchImpl = fetch, ti
   } catch (err) {
     if (err instanceof Error && (err.name === "TimeoutError" || err.name === "AbortError")) {
       throw new HavenSignContextError(
-        `Haven did not finish sending the direct-payment signing context for ${paymentId} within ${timeoutMs} ms. Retry, or pass typed_data_b64 from the payment result instead.`,
+        `Haven did not finish sending the direct-payment signing context for ${paymentId} within ${timeoutMs} ms. Retry, or re-run haven_send / haven_pay with the same idempotency_key plus include_signing_payload: true and pass typed_data_b64 from that result instead.`,
         "SIGN_CONTEXT_TIMEOUT",
         void 0,
         paymentId,
@@ -638,7 +646,7 @@ async function fetchDirectSignContext(identity, paymentId, fetchImpl = fetch, ti
   if (!response.ok) {
     const detail = typeof body.error === "string" ? body.error : `HTTP ${response.status}`;
     throw new HavenSignContextError(
-      `Haven refused the direct-payment signing-context fetch for ${paymentId}: ${detail}` + (response.status === 404 ? " \u2014 either the payment_id is not from this agent\u2019s own POST /payments call, or this Haven backend predates #3271. Pass payload_hash and typed_data_b64 from the haven_send / haven_pay result, unchanged, instead." : body.error_code === "expired" ? " The payment window has expired; call haven_send / haven_pay again with the same idempotency_key." : ""),
+      `Haven refused the direct-payment signing-context fetch for ${paymentId}: ${detail}` + (response.status === 404 ? " \u2014 either the payment_id is not from this agent\u2019s own POST /payments call, or this Haven backend predates #3271 (which also predates #3495, so its haven_send / haven_pay result already carries payload_hash and typed_data_b64 unconditionally). Pass payload_hash and typed_data_b64, unchanged, from the original result \u2014 or, on a newer server, from a same-key re-run with include_signing_payload: true." : body.error_code === "expired" ? " The payment window has expired; call haven_send / haven_pay again with the same idempotency_key." : ""),
       "SIGN_CONTEXT_REFUSED",
       refusalOf(response.status, body),
       paymentId,
@@ -649,7 +657,7 @@ async function fetchDirectSignContext(identity, paymentId, fetchImpl = fetch, ti
   const version = body.direct_sign_context_version;
   if (!signData || typeof signData.hash !== "string" || !signData.typed_data || typeof signData.typed_data !== "object" || signData.signature_scheme !== "eip712_userop" || typeof version !== "number" || !SUPPORTED_DIRECT_SIGN_CONTEXT_VERSIONS.includes(version)) {
     throw new HavenSignContextError(
-      typeof version === "number" && !SUPPORTED_DIRECT_SIGN_CONTEXT_VERSIONS.includes(version) ? `The Haven direct-payment sign-context response is version ${version}, which this signer does not support (supported: ${SUPPORTED_DIRECT_SIGN_CONTEXT_VERSIONS.join(", ")}). Update @haven_ai/signer.` : "The Haven direct-payment sign-context response is missing sign_data.typed_data, or its signature_scheme is not 'eip712_userop' \u2014 the backend may predate #3271. Pass typed_data_b64 from the payment result instead.",
+      typeof version === "number" && !SUPPORTED_DIRECT_SIGN_CONTEXT_VERSIONS.includes(version) ? `The Haven direct-payment sign-context response is version ${version}, which this signer does not support (supported: ${SUPPORTED_DIRECT_SIGN_CONTEXT_VERSIONS.join(", ")}). Update @haven_ai/signer.` : "The Haven direct-payment sign-context response is missing sign_data.typed_data, or its signature_scheme is not 'eip712_userop' \u2014 the backend may predate #3271. Re-run haven_send / haven_pay with the same idempotency_key plus include_signing_payload: true and pass typed_data_b64 from that result instead.",
       "SIGN_CONTEXT_MALFORMED",
       void 0,
       paymentId,
@@ -896,7 +904,8 @@ function signerCompatibility() {
     x402_expected_context_versions: [...SUPPORTED_X402_EXPECTED_VERSIONS],
     sweep_binding_versions: [...SUPPORTED_SWEEP_BINDING_VERSIONS],
     direct_sign_context_versions: [...SUPPORTED_DIRECT_SIGN_CONTEXT_VERSIONS],
-    task_sign_context_versions: [...SUPPORTED_TASK_SIGN_CONTEXT_VERSIONS]
+    task_sign_context_versions: [...SUPPORTED_TASK_SIGN_CONTEXT_VERSIONS],
+    sub_budget_sign_context_versions: [...SUPPORTED_SUB_BUDGET_SIGN_CONTEXT_VERSIONS]
   };
 }
 function signerCapabilityAdvertisement() {
@@ -916,6 +925,7 @@ function signerInstructions() {
     `- sweep authorization binding versions supported: ${compatibility.sweep_binding_versions.join(", ")}`,
     `- direct-payment (haven_send / haven_pay) sign-context versions supported: ${compatibility.direct_sign_context_versions.join(", ")} \u2014 pass payment_id alone to haven_sign; this signer fetches the exact bytes`,
     `- task-budget sign-context versions supported: ${compatibility.task_sign_context_versions.join(", ")} \u2014 pass task_budget_id alone to haven_sign; this signer fetches the exact bytes`,
+    `- sub-budget sign-context versions supported: ${compatibility.sub_budget_sign_context_versions.join(", ")} \u2014 pass sub_budget_id alone to haven_sign; this signer fetches the exact bytes (a sub-budget your owner issued narrows your own budget for another agent of your account)`,
     "",
     "Haven quote and prepare results report the expected-context version they will emit",
     "(signer_compatibility.x402_expected_context_version). If that version is not in the list",
@@ -1155,7 +1165,7 @@ var HavenBareHashRefusedError = class extends HavenSigningError {
 
 // src/tools.ts
 var SIGNER_NAME = "@haven_ai/signer";
-var SIGNER_VERSION = "0.7.0-alpha.0";
+var SIGNER_VERSION = "0.8.1-alpha.0";
 var UNSUPPORTED_ARGUMENT_MARKER = "HavenSignerUnsupportedArgument:";
 var USEROP_BINDING_MISMATCH = "USEROP_BINDING_MISMATCH";
 var HavenUserOpBindingRefusedError = class extends HavenSigningError {
@@ -1169,7 +1179,7 @@ var HavenUserOpBindingRefusedError = class extends HavenSigningError {
     this.step = signerRefusalStep({
       nextAction: AgentPaymentNextAction.StopAndTellUser,
       nextTool: null,
-      nextToolOmittedReason: "call haven_sign again with payment_id alone (preferred), or with typed_data copied unchanged from the payment result"
+      nextToolOmittedReason: "call haven_sign again with payment_id alone (preferred), or with typed_data copied unchanged from the payment result (or, on a compact direct-payment result, from a same-key re-run with include_signing_payload: true)"
     });
   }
 };
@@ -1975,7 +1985,7 @@ function normalizeError(err) {
 
 // src/consent.ts
 var toolSummaries = {
-  haven_sign: "signs a Haven-prepared payment, task-budget open, or task-budget close (a UserOp from your own account whose only call redeems a delegation made to it, directly or through a self-delegated task-budget child, or an x402 funding intent against a Haven-signed context)",
+  haven_sign: "signs a Haven-prepared payment, task-budget or sub-budget open or close (a UserOp from your own account redeeming a delegation made to it, directly or via a task-budget child; a sub-budget child narrowing your budget for another agent of yours; or an x402 funding intent against a Haven-signed context)",
   haven_x402_sign_header: "builds and signs the EIP-3009 merchant payment header for an x402 payment",
   haven_sign_x402: "the two above in one call: funding payload + merchant header",
   haven_sign_sweep_delegate: "signs a Haven-prepared gasless sweep of stranded funds back to your own account"