@haven_ai/connect 0.1.11-alpha.0 → 0.1.12-alpha.0

package/dist/index.cjs

@@ -8,6 +8,7 @@ var path = require('path');
 var child_process = require('child_process');
 var util = require('util');
 var mcp = require('@haven_ai/mcp');
+var sdk = require('@haven_ai/sdk');
 var signer = require('@haven_ai/signer');
 
 function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
@@ -146,6 +147,7 @@ async function writeCredentialFiles(input) {
       safe_address: input.safeAddress,
       chain_id: input.chainId,
       network: input.network,
+      x402_binding_signer: input.x402BindingSigner,
       note: "Local signer credential. Haven backend never receives this private key."
     },
     input.warn
@@ -212,9 +214,9 @@ var MCP_RUNTIME_MANIFEST = {
   mcpPackage: "@haven_ai/mcp",
   mcpVersion: mcp.MCP_VERSION,
   sdkPackage: "@haven_ai/sdk",
-  sdkVersion: "0.1.11-alpha.0",
+  sdkVersion: "0.1.12-alpha.0",
   signerPackage: "@haven_ai/signer",
-  signerVersion: "0.1.11-alpha.0",
+  signerVersion: "0.1.12-alpha.0",
   minimumNodeVersion: "20.0.0",
   supportedClients: ["codex-cli", "codex-desktop", "claude-code"],
   requiredTools: mcp.registeredToolNames()
@@ -1155,75 +1157,6 @@ async function assertFileExists(path, label) {
     throw new Error(`Missing ${label}: ${path}`);
   }
 }
-
-// src/skill-content.ts
-var HAVEN_SKILL_MD = `---
-name: haven-pay
-description: Pay for things from the user's Haven wallet within their agent rules. Use when the user asks to send, pay, tip, or transfer crypto \u2014 or when a request hits an HTTP 402 (x402) paywall.
----
-
-# Haven: pay from a Haven wallet
-
-This skill lets the agent make payments from the user's Haven wallet through
-the Haven MCP tools. Every payment is checked against the agent's on-chain
-budget before money moves; payments above the remaining budget wait for the
-user's approval in Haven.
-
-## When to use this skill
-
-- The user asks to send money, pay someone, tip, donate, or transfer tokens.
-- A request returns HTTP 402 (x402): use the Haven pay tools to settle it,
-  then retry the original request.
-
-## Identity and budget come from the tools \u2014 never assume them
-
-Do not guess the wallet address, network, or budget. Read them live:
-
-- \`haven_get_agent\` \u2014 agent identity, Haven wallet address, network.
-- \`haven_get_allowances\` \u2014 current per-token budgets and what remains.
-
-Budgets reset on a period the user chose. If a payment exceeds the remaining
-budget it is queued for the user to approve in the Haven dashboard \u2014 this is
-normal, not an error.
-
-## Paying
-
-- **Direct transfer:** \`haven_pay\` with recipient, amount, and token.
-- **x402 paywall:** \`haven_quote_x402\` to get a quote, then
-  \`haven_pay_x402_quote\`. In the hosted setup the signing step happens in
-  the local Haven signer; follow the tool results \u2014 they tell you the next
-  action at every step. Retry the original request only when the result says
-  \`retry_original_x402_request\`.
-- **Status:** \`haven_get_payment_status\` with a \`payment_id\` to check on
-  queued or in-flight payments. Do not poll in a tight loop.
-
-## Approval semantics
-
-- A result with \`pending_approval\` means the payment exceeded the remaining
-  budget and is waiting for the user in Haven. Tell the user, then check
-  status later.
-- Never ask the user for private keys and never try to sign anything
-  yourself \u2014 Haven signs. If a tool reports a missing or invalid credential,
-  tell the user to re-run the Haven setup command.
-
-## Failure handling
-
-Haven errors are shaped \`{ error, status, details? }\` and written for
-humans \u2014 surface the message verbatim. Common cases:
-
-- \`pending_approval\`: queued for the user's approval (see above).
-- \`insufficient_funds\`: the Haven wallet doesn't hold enough of that token.
-  Suggest the user add funds in the Haven dashboard.
-- Budget exceeded: tell the user how much remains (from
-  \`haven_get_allowances\`) and that they can raise the budget in Haven.
-
-## Revoke
-
-If this agent's credential may have leaked, tell the user to pause or revoke
-the agent in the Haven dashboard under Agents. New requests stop immediately
-for that credential.
-`;
-var SKILL_FOLDER_NAME = "haven-pay";
 async function acknowledgeLocalSignerConsent(signerPath, log) {
   try {
     const input = await buildSignerConsentInput(signerPath);
@@ -1506,9 +1439,9 @@ async function defaultRunCommand(command, args) {
 }
 async function installClaudeSkill(homeDir) {
   try {
-    const skillDir = path.resolve(homeDir ?? os.homedir(), ".claude", "skills", SKILL_FOLDER_NAME);
+    const skillDir = path.resolve(homeDir ?? os.homedir(), ".claude", "skills", sdk.SKILL_FOLDER_NAME);
     await promises.mkdir(skillDir, { recursive: true });
-    await promises.writeFile(path.join(skillDir, "SKILL.md"), HAVEN_SKILL_MD, "utf8");
+    await promises.writeFile(path.join(skillDir, "SKILL.md"), sdk.HAVEN_SKILL_MD, "utf8");
     return {
       installed: true,
       messages: ["Installed the generic Haven payment skill (~/.claude/skills/haven-pay). It contains no secrets."]
@@ -1601,7 +1534,7 @@ function localRuntimePrepareErrorCode(err) {
 }
 
 // src/runtime.ts
-var CONNECTOR_VERSION = "0.1.11-alpha.0";
+var CONNECTOR_VERSION = "0.1.12-alpha.0";
 async function runConnect(options, deps = {}) {
   const connectorVersion = options.connectorVersion ?? CONNECTOR_VERSION;
   const api = deps.api ?? createConnectApiClient(options.apiBaseUrl);
@@ -1666,10 +1599,18 @@ async function runConnect(options, deps = {}) {
     })),
     apiUrl: options.apiBaseUrl,
     hostedMcpUrl: registration.hosted_mcp_url,
+    x402BindingSigner: setup.x402_binding_signer ?? void 0,
     warn: log
   });
   log(`Stored Haven identity credential locally: ${credentialPaths.identityPath}`);
   log(`Stored local signer credential locally: ${credentialPaths.signerPath}`);
+  if (setup.x402_binding_signer) {
+    log("Configured x402 binding signer for the local signer.");
+  } else {
+    log(
+      "Warning: Haven did not provide an x402 binding signer, so x402 payments will not sign until HAVEN_X402_BINDING_SIGNER is set for the signer. Non-x402 payments are unaffected."
+    );
+  }
   const runtimeInstall = await runRuntimeInstall({
     runtime: options.runtime,
     hostedMcpUrl: registration.hosted_mcp_url,