@haven_ai/connect 0.1.10-alpha.0 → 0.1.11-alpha.0

package/dist/cli.cjs

@@ -9,7 +9,6 @@ var path = require('path');
 var child_process = require('child_process');
 var util = require('util');
 var mcp = require('@haven_ai/mcp');
-var sdk = require('@haven_ai/sdk');
 var signer = require('@haven_ai/signer');
 
 function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
@@ -214,9 +213,9 @@ var MCP_RUNTIME_MANIFEST = {
   mcpPackage: "@haven_ai/mcp",
   mcpVersion: mcp.MCP_VERSION,
   sdkPackage: "@haven_ai/sdk",
-  sdkVersion: "0.1.10-alpha.0",
+  sdkVersion: "0.1.11-alpha.0",
   signerPackage: "@haven_ai/signer",
-  signerVersion: "0.1.10-alpha.0",
+  signerVersion: "0.1.11-alpha.0",
   minimumNodeVersion: "20.0.0",
   supportedClients: ["codex-cli", "codex-desktop", "claude-code"],
   requiredTools: mcp.registeredToolNames()
@@ -1157,6 +1156,75 @@ async function assertFileExists(path, label) {
     throw new Error(`Missing ${label}: ${path}`);
   }
 }
+
+// src/skill-content.ts
+var HAVEN_SKILL_MD = `---
+name: haven-pay
+description: Pay for things from the user's Haven wallet within their agent rules. Use when the user asks to send, pay, tip, or transfer crypto \u2014 or when a request hits an HTTP 402 (x402) paywall.
+---
+
+# Haven: pay from a Haven wallet
+
+This skill lets the agent make payments from the user's Haven wallet through
+the Haven MCP tools. Every payment is checked against the agent's on-chain
+budget before money moves; payments above the remaining budget wait for the
+user's approval in Haven.
+
+## When to use this skill
+
+- The user asks to send money, pay someone, tip, donate, or transfer tokens.
+- A request returns HTTP 402 (x402): use the Haven pay tools to settle it,
+  then retry the original request.
+
+## Identity and budget come from the tools \u2014 never assume them
+
+Do not guess the wallet address, network, or budget. Read them live:
+
+- \`haven_get_agent\` \u2014 agent identity, Haven wallet address, network.
+- \`haven_get_allowances\` \u2014 current per-token budgets and what remains.
+
+Budgets reset on a period the user chose. If a payment exceeds the remaining
+budget it is queued for the user to approve in the Haven dashboard \u2014 this is
+normal, not an error.
+
+## Paying
+
+- **Direct transfer:** \`haven_pay\` with recipient, amount, and token.
+- **x402 paywall:** \`haven_quote_x402\` to get a quote, then
+  \`haven_pay_x402_quote\`. In the hosted setup the signing step happens in
+  the local Haven signer; follow the tool results \u2014 they tell you the next
+  action at every step. Retry the original request only when the result says
+  \`retry_original_x402_request\`.
+- **Status:** \`haven_get_payment_status\` with a \`payment_id\` to check on
+  queued or in-flight payments. Do not poll in a tight loop.
+
+## Approval semantics
+
+- A result with \`pending_approval\` means the payment exceeded the remaining
+  budget and is waiting for the user in Haven. Tell the user, then check
+  status later.
+- Never ask the user for private keys and never try to sign anything
+  yourself \u2014 Haven signs. If a tool reports a missing or invalid credential,
+  tell the user to re-run the Haven setup command.
+
+## Failure handling
+
+Haven errors are shaped \`{ error, status, details? }\` and written for
+humans \u2014 surface the message verbatim. Common cases:
+
+- \`pending_approval\`: queued for the user's approval (see above).
+- \`insufficient_funds\`: the Haven wallet doesn't hold enough of that token.
+  Suggest the user add funds in the Haven dashboard.
+- Budget exceeded: tell the user how much remains (from
+  \`haven_get_allowances\`) and that they can raise the budget in Haven.
+
+## Revoke
+
+If this agent's credential may have leaked, tell the user to pause or revoke
+the agent in the Haven dashboard under Agents. New requests stop immediately
+for that credential.
+`;
+var SKILL_FOLDER_NAME = "haven-pay";
 async function acknowledgeLocalSignerConsent(signerPath, log) {
   try {
     const input = await buildSignerConsentInput(signerPath);
@@ -1439,9 +1507,9 @@ async function defaultRunCommand(command, args) {
 }
 async function installClaudeSkill(homeDir) {
   try {
-    const skillDir = path.resolve(homeDir ?? os.homedir(), ".claude", "skills", sdk.SKILL_FOLDER_NAME);
+    const skillDir = path.resolve(homeDir ?? os.homedir(), ".claude", "skills", SKILL_FOLDER_NAME);
     await promises.mkdir(skillDir, { recursive: true });
-    await promises.writeFile(path.join(skillDir, "SKILL.md"), sdk.HAVEN_SKILL_MD, "utf8");
+    await promises.writeFile(path.join(skillDir, "SKILL.md"), HAVEN_SKILL_MD, "utf8");
     return {
       installed: true,
       messages: ["Installed the generic Haven payment skill (~/.claude/skills/haven-pay). It contains no secrets."]
@@ -1534,7 +1602,7 @@ function localRuntimePrepareErrorCode(err) {
 }
 
 // src/runtime.ts
-var CONNECTOR_VERSION = "0.1.2";
+var CONNECTOR_VERSION = "0.1.11-alpha.0";
 async function runConnect(options, deps = {}) {
   const connectorVersion = options.connectorVersion ?? CONNECTOR_VERSION;
   const api = deps.api ?? createConnectApiClient(options.apiBaseUrl);