@haven_ai/mcp 0.0.0-dev.202609281945.3f83e0e → 0.0.0-dev.202609282018.d7956ad

package/README.md

@@ -121,21 +121,16 @@ Environment variable form:
 - `haven_close_task_budget` (#3329)
 - `haven_submit` (#3329 — relays a local signer signature by `task_budget_id`; a `payment_id` is refused on this runtime, which signs and submits payments inline)
 
-### `idempotencyKey` is deprecated — send `idempotency_key`
+### `idempotencyKey` is removed — send `idempotency_key`
 
 The tools that take an idempotency key (`haven_send`, `haven_pay_mcp_tool`,
-`haven_quote_x402`, `haven_pay_x402_quote`, `haven_pay_x402`) now accept
-**`idempotency_key`**, the spelling the hosted Haven MCP surface and every other
-Haven wire contract use. `idempotencyKey` still works and returns a deprecation
-warning; it will be removed in a future release.
-
-Send **one** of them. Sending both with different values is refused
-(`AMBIGUOUS_IDEMPOTENCY_KEY`) with nothing contacted or spent — the key decides
-whether a retry is the same payment or a second one, so Haven will not guess
-which scope you meant. Sending both with the same value is fine.
-
-The warning arrives in an optional `warnings` array on the success result. It is
-additive: a caller that ignores it sees the response it always saw.
+`haven_quote_x402`, `haven_pay_x402_quote`, `haven_pay_x402`) take
+**`idempotency_key`**, the spelling the hosted Haven MCP surface uses.
+
+The legacy `idempotencyKey` spelling is **refused**, not silently accepted or
+dropped: any call that sets it — alone or alongside `idempotency_key` — fails
+with `IDEMPOTENCY_KEY_RENAMED` before anything is contacted or spent. Send
+`idempotency_key` instead.
 
 ## First-launch consent
 

package/dist/cli.cjs

@@ -245,8 +245,8 @@ var toolSchemas = {
     recipient: v3.z.string().min(1),
     amount: v3.z.string().min(1),
     idempotency_key: v3.z.string().optional(),
-    /** Legacy spelling, accepted during the #2366 window. Warns; do not use. */
-    idempotencyKey: v3.z.string().optional(),
+    /** REMOVED (#3411): declared only so the resolver can refuse it by name, never accepted. */
+    idempotencyKey: v3.z.string().optional().describe("REMOVED (#3411): refused \u2014 send idempotency_key"),
     /** #3329: spend against an open task budget instead of the agent's period budget. */
     task_budget_id: v3.z.string().min(1).optional()
   },
@@ -255,8 +255,8 @@ var toolSchemas = {
     tool_name: v3.z.string().min(1),
     arguments: v3.z.record(v3.z.string(), v3.z.unknown()).optional(),
     idempotency_key: v3.z.string().optional(),
-    /** Legacy spelling, accepted during the #2366 window. Warns; do not use. */
-    idempotencyKey: v3.z.string().optional()
+    /** REMOVED (#3411): declared only so the resolver can refuse it by name, never accepted. */
+    idempotencyKey: v3.z.string().optional().describe("REMOVED (#3411): refused \u2014 send idempotency_key")
   },
   haven_quote_x402: {
     url: v3.z.string().url(),
@@ -264,14 +264,14 @@ var toolSchemas = {
     headers: headersSchema,
     body: v3.z.string().optional(),
     idempotency_key: v3.z.string().optional(),
-    /** Legacy spelling, accepted during the #2366 window. Warns; do not use. */
-    idempotencyKey: v3.z.string().optional()
+    /** REMOVED (#3411): declared only so the resolver can refuse it by name, never accepted. */
+    idempotencyKey: v3.z.string().optional().describe("REMOVED (#3411): refused \u2014 send idempotency_key")
   },
   haven_pay_x402_quote: {
     quote: v3.z.unknown(),
     idempotency_key: v3.z.string().optional(),
-    /** Legacy spelling, accepted during the #2366 window. Warns; do not use. */
-    idempotencyKey: v3.z.string().optional(),
+    /** REMOVED (#3411): declared only so the resolver can refuse it by name, never accepted. */
+    idempotencyKey: v3.z.string().optional().describe("REMOVED (#3411): refused \u2014 send idempotency_key"),
     /** #3329: spend against an open task budget instead of the agent's period budget. */
     task_budget_id: v3.z.string().min(1).optional()
   },
@@ -281,8 +281,8 @@ var toolSchemas = {
     headers: headersSchema,
     body: v3.z.string().optional(),
     idempotency_key: v3.z.string().optional(),
-    /** Legacy spelling, accepted during the #2366 window. Warns; do not use. */
-    idempotencyKey: v3.z.string().optional(),
+    /** REMOVED (#3411): declared only so the resolver can refuse it by name, never accepted. */
+    idempotencyKey: v3.z.string().optional().describe("REMOVED (#3411): refused \u2014 send idempotency_key"),
     /** #3329: spend against an open task budget instead of the agent's period budget. */
     task_budget_id: v3.z.string().min(1).optional()
   },
@@ -401,9 +401,9 @@ function createToolHandlers(haven) {
             token: args.asset,
             amount: args.amount,
             to: args.recipient,
-            // #1207: was accepted by the schema but silently dropped — now
-            // carried to the backend's replay contract.
-            idempotencyKey: args.idempotencyKey,
+            // #1207/#3411: was accepted by the schema but silently dropped — now
+            // carried to the backend's replay contract via the resolved carrier.
+            idempotencyKey: args.resolvedIdempotencyKey,
             // #3329: spend against an open task budget instead of the
             // agent's period budget, when the caller names one.
             ...typeof args.task_budget_id === "string" ? { taskBudgetId: args.task_budget_id } : {}
@@ -444,7 +444,7 @@ function createToolHandlers(haven) {
           body: JSON.stringify(envelope)
         };
         let merchantUrl = args.merchant_url;
-        const idempotencyKey = args.idempotencyKey;
+        const idempotencyKey = args.resolvedIdempotencyKey;
         const attempt = () => haven.fetch(merchantUrl, init, { idempotencyKey });
         let response = await attempt();
         if (!response.ok) {
@@ -478,7 +478,7 @@ function createToolHandlers(haven) {
       if ("success" in pf) return pf;
       const { args, warnings } = pf;
       try {
-        const data = await haven.quoteX402(args.url, requestInit(args), { idempotencyKey: args.idempotencyKey });
+        const data = await haven.quoteX402(args.url, requestInit(args), { idempotencyKey: args.resolvedIdempotencyKey });
         return warnings.length > 0 ? { success: true, data, warnings } : { success: true, data };
       } catch (err) {
         return normalizeError(err);
@@ -505,7 +505,7 @@ function createToolHandlers(haven) {
       }
       return runTool(async () => {
         const response = await haven.payX402Quote(args.quote, {
-          idempotencyKey: args.idempotencyKey,
+          idempotencyKey: args.resolvedIdempotencyKey,
           ...typeof args.task_budget_id === "string" ? { taskBudgetId: args.task_budget_id } : {}
         });
         return responsePayload(response);
@@ -517,7 +517,7 @@ function createToolHandlers(haven) {
       const { args, warnings } = pf;
       return runTool(async () => {
         const response = await haven.fetch(args.url, requestInit(args), {
-          idempotencyKey: args.idempotencyKey,
+          idempotencyKey: args.resolvedIdempotencyKey,
           ...typeof args.task_budget_id === "string" ? { taskBudgetId: args.task_budget_id } : {}
         });
         return responsePayload(response);
@@ -715,28 +715,20 @@ function preflight(name, input) {
   }
   const idem = resolveIdempotencyKey(args);
   if ("success" in idem) return idem;
-  if (idem.key !== void 0) args = { ...args, idempotencyKey: idem.key };
+  if (idem.key !== void 0) args = { ...args, resolvedIdempotencyKey: idem.key };
   return { args, warnings: idem.warnings };
 }
 function resolveIdempotencyKey(args) {
   const modern = typeof args.idempotency_key === "string" ? args.idempotency_key : void 0;
   const legacy = typeof args.idempotencyKey === "string" ? args.idempotencyKey : void 0;
-  if (modern !== void 0 && legacy !== void 0 && modern !== legacy) {
+  if (legacy !== void 0) {
     return {
       success: false,
-      code: "AMBIGUOUS_IDEMPOTENCY_KEY",
-      message: "Both idempotency_key and idempotencyKey were sent with different values. Nothing was contacted or spent. Send exactly one \u2014 idempotency_key is the current spelling; idempotencyKey is deprecated and will be removed."
+      code: "IDEMPOTENCY_KEY_RENAMED",
+      message: "idempotencyKey has been renamed to idempotency_key and is no longer accepted. Send idempotency_key instead. Nothing was contacted or spent."
     };
   }
   if (modern !== void 0) return { key: modern, warnings: [] };
-  if (legacy !== void 0) {
-    return {
-      key: legacy,
-      warnings: [
-        "idempotencyKey is deprecated and will be removed in a future release of @haven_ai/mcp. Send idempotency_key instead \u2014 it is the spelling the hosted Haven MCP surface and every other Haven wire contract use."
-      ]
-    };
-  }
   return { warnings: [] };
 }
 function buildMcpToolsCallEnvelope(toolName, args) {
@@ -1123,7 +1115,7 @@ async function resolveHavenClient(options = {}) {
   return { client, credentials };
 }
 var MCP_NAME = "@haven_ai/mcp";
-var MCP_VERSION = "0.0.0-dev.202609281945.3f83e0e";
+var MCP_VERSION = "0.0.0-dev.202609282018.d7956ad";
 var MCP_INSTRUCTIONS = [
   "Haven local MCP server: signs in-process with the delegate key it holds on",
   "this machine \u2014 the key never leaves this process. Call haven_get_agent",