@haven_ai/mcp 0.1.0-alpha

package/dist/index.cjs

@@ -0,0 +1,556 @@
+'use strict';
+
+var mcp_js = require('@modelcontextprotocol/sdk/server/mcp.js');
+var stdio_js = require('@modelcontextprotocol/sdk/server/stdio.js');
+var sdk = require('@haven_ai/sdk');
+var promises = require('fs/promises');
+var v3 = require('zod/v3');
+var crypto = require('crypto');
+var path = require('path');
+
+// src/server.ts
+async function loadCredentials(path = process.env.HAVEN_CREDENTIALS) {
+  if (path) {
+    return loadCredentialsFromFile(path);
+  }
+  const envCreds = loadCredentialsFromEnv();
+  if (envCreds) return envCreds;
+  throw new Error(
+    "No Haven credentials found. Set HAVEN_CREDENTIALS to a Haven agent credential JSON file, pass --credentials <path>, or set HAVEN_API_KEY and HAVEN_DELEGATE_KEY environment variables."
+  );
+}
+async function loadCredentialsFromFile(path) {
+  let rawText;
+  try {
+    rawText = await promises.readFile(path, "utf8");
+  } catch (err) {
+    throw new Error(`Could not read Haven credentials at ${path}: ${err instanceof Error ? err.message : String(err)}`);
+  }
+  let raw;
+  try {
+    raw = JSON.parse(rawText);
+  } catch {
+    throw new Error("Haven credentials must be JSON with api_key and delegate_key fields.");
+  }
+  const apiKey = stringField(raw.api_key ?? raw.apiKey);
+  const delegateKey = stringField(raw.delegate_key ?? raw.delegateKey);
+  if (!apiKey) {
+    throw new Error("Haven credentials are missing api_key.");
+  }
+  if (!delegateKey) {
+    throw new Error("Haven MCP requires delegate_key so payments can be signed locally.");
+  }
+  return {
+    apiKey,
+    delegateKey,
+    agentId: stringField(raw.agent_id ?? raw.agentId),
+    safeAddress: stringField(raw.safe_address ?? raw.safeAddress),
+    apiUrl: stringField(raw.api_url ?? raw.apiUrl),
+    sourcePath: path
+  };
+}
+function loadCredentialsFromEnv() {
+  const apiKey = stringField(process.env.HAVEN_API_KEY);
+  const delegateKey = stringField(process.env.HAVEN_DELEGATE_KEY);
+  if (!apiKey && !delegateKey) return null;
+  if (!apiKey) {
+    throw new Error("HAVEN_DELEGATE_KEY is set but HAVEN_API_KEY is missing.");
+  }
+  if (!delegateKey) {
+    throw new Error("HAVEN_API_KEY is set but HAVEN_DELEGATE_KEY is missing. Haven MCP requires a delegate key so payments can be signed locally.");
+  }
+  return {
+    apiKey,
+    delegateKey,
+    agentId: stringField(process.env.HAVEN_AGENT_ID),
+    safeAddress: stringField(process.env.HAVEN_SAFE_ADDRESS),
+    apiUrl: stringField(process.env.HAVEN_API_URL)
+  };
+}
+function stringField(value) {
+  return typeof value === "string" && value.trim() ? value.trim() : void 0;
+}
+var headersSchema = v3.z.record(v3.z.string(), v3.z.string()).optional();
+var toolSchemas = {
+  haven_quote_x402: {
+    url: v3.z.string().url(),
+    method: v3.z.string().optional(),
+    headers: headersSchema,
+    body: v3.z.string().optional(),
+    idempotencyKey: v3.z.string().optional()
+  },
+  haven_pay_x402_quote: {
+    quote: v3.z.unknown(),
+    idempotencyKey: v3.z.string().optional()
+  },
+  haven_resume_x402_payment: {
+    payment_id: v3.z.string().optional(),
+    resume_state: v3.z.unknown().optional()
+  },
+  haven_quote_mpp: {
+    url: v3.z.string().url().optional(),
+    challenge: v3.z.unknown().optional(),
+    method: v3.z.string().optional(),
+    headers: headersSchema,
+    body: v3.z.string().optional(),
+    idempotencyKey: v3.z.string().optional()
+  },
+  haven_pay_mpp_challenge: {
+    quote: v3.z.unknown(),
+    idempotencyKey: v3.z.string().optional()
+  },
+  haven_resume_mpp_payment: {
+    payment_id: v3.z.string().optional(),
+    resume_state: v3.z.unknown().optional()
+  },
+  haven_get_payment_status: {
+    payment_id: v3.z.string()
+  },
+  haven_get_resume_state: {
+    payment_id: v3.z.string()
+  },
+  haven_get_agent: {},
+  haven_get_allowances: {},
+  haven_list_receipts: {
+    limit: v3.z.number().int().min(1).max(100).optional()
+  }
+};
+var toolDescriptions = {
+  haven_quote_x402: "Inspect an HTTP 402 x402 paid resource without creating a Haven payment, signature, approval, or on-chain transaction.",
+  haven_pay_x402_quote: "Pay a previously inspected x402 quote. The delegate key signs locally; Haven only validates and relays signed, on-chain-constrained payment transactions. If approval is needed, preserve the returned resume_state and wait for nextAction=retry_original_x402_request before resuming.",
+  haven_resume_x402_payment: "Resume an x402 payment after the Haven wallet owner approved the funding step. Accepts either resume_state or payment_id. Only use when get status returns nextAction=retry_original_x402_request; do not start a new merchant session.",
+  haven_quote_mpp: "Inspect a Haven MPP challenge or paid MPP URL without creating a Haven payment, signature, approval, or on-chain transaction.",
+  haven_pay_mpp_challenge: "Pay a previously inspected MPP challenge. The delegate key signs locally; Haven only validates and relays signed, on-chain-constrained payment transactions. If approval is needed, preserve resume_state or payment_id.",
+  haven_resume_mpp_payment: "Resume an MPP payment after the Haven wallet owner approved the funding step. Accepts either resume_state or payment_id and retries the original paid resource.",
+  haven_get_payment_status: "Fetch structured Haven payment status, including phase and nextAction taxonomy for agent recovery.",
+  haven_get_resume_state: "Rehydrate stored x402/MPP resume_state by payment_id. This returns context only; signing still happens locally when a resume tool is called.",
+  haven_get_agent: "Return the authenticated agent identity, Haven wallet, delegate address, chain, and status.",
+  haven_get_allowances: "Return configured and on-chain allowance state for the authenticated agent. On-chain allowance is the real spend gate.",
+  haven_list_receipts: "List recent machine-payment receipts/evidence for bookkeeping. Proof header values are not returned."
+};
+function createToolHandlers(haven) {
+  return {
+    haven_quote_x402: async (input) => {
+      const args = objectInput("haven_quote_x402", input);
+      return runTool(async () => haven.quoteX402(args.url, requestInit(args), { idempotencyKey: args.idempotencyKey }));
+    },
+    haven_pay_x402_quote: async (input) => {
+      const args = objectInput("haven_pay_x402_quote", input);
+      return runTool(async () => {
+        const response = await haven.payX402Quote(args.quote, { idempotencyKey: args.idempotencyKey });
+        return responsePayload(response);
+      });
+    },
+    haven_resume_x402_payment: async (input) => {
+      const args = objectInput("haven_resume_x402_payment", input);
+      return runTool(async () => {
+        const state = await resumeState(args, "x402");
+        const response = await haven.resumeX402Payment(state);
+        return responsePayload(response);
+      });
+    },
+    haven_quote_mpp: async (input) => {
+      const args = objectInput("haven_quote_mpp", input);
+      return runTool(async () => {
+        if (args.challenge) {
+          return haven.quoteMpp(args.challenge, requestInit(args), {
+            idempotencyKey: args.idempotencyKey
+          });
+        }
+        if (!args.url) {
+          throw new sdk.HavenApiError("haven_quote_mpp requires either url or challenge.", 400);
+        }
+        return haven.quoteMpp(args.url, requestInit(args), { idempotencyKey: args.idempotencyKey });
+      });
+    },
+    haven_pay_mpp_challenge: async (input) => {
+      const args = objectInput("haven_pay_mpp_challenge", input);
+      return runTool(async () => {
+        const response = await haven.payMppChallenge(args.quote, { idempotencyKey: args.idempotencyKey });
+        return responsePayload(response);
+      });
+    },
+    haven_resume_mpp_payment: async (input) => {
+      const args = objectInput("haven_resume_mpp_payment", input);
+      return runTool(async () => {
+        const state = await resumeState(args, "mpp");
+        const response = await haven.resumeMppPayment(state);
+        return responsePayload(response);
+      });
+    },
+    haven_get_payment_status: async (input) => {
+      const args = objectInput("haven_get_payment_status", input);
+      return runTool(async () => haven.getPaymentStatus(args.payment_id));
+    },
+    haven_get_resume_state: async (input) => {
+      const args = objectInput("haven_get_resume_state", input);
+      return runTool(async () => haven.getResumeState(args.payment_id));
+    },
+    haven_get_agent: async () => runTool(async () => haven.getAgent()),
+    haven_get_allowances: async () => runTool(async () => haven.getAllowances()),
+    haven_list_receipts: async (input) => {
+      const args = objectInput("haven_list_receipts", input);
+      return runTool(async () => haven.listReceipts({ limit: args.limit }));
+    }
+  };
+  async function resumeState(args, rail) {
+    const state = args.resume_state ?? (args.payment_id ? await haven.getResumeState(args.payment_id) : void 0);
+    if (!state || typeof state !== "object") {
+      throw new sdk.HavenApiError(`haven_resume_${rail}_payment requires resume_state or payment_id.`, 400);
+    }
+    if (state.rail !== rail) {
+      throw new sdk.HavenApiError(`Resume state is not for the ${rail} rail.`, 409, state);
+    }
+    return state;
+  }
+}
+function objectInput(name, input) {
+  return v3.z.object(toolSchemas[name]).parse(input ?? {});
+}
+function requestInit(input) {
+  if (!input.method && !input.headers && input.body === void 0) return void 0;
+  return {
+    method: input.method,
+    headers: input.headers,
+    body: input.body
+  };
+}
+async function runTool(fn) {
+  try {
+    return { success: true, data: await fn() };
+  } catch (err) {
+    return normalizeError(err);
+  }
+}
+async function responsePayload(response) {
+  const text = await response.text();
+  return {
+    status: response.status,
+    statusText: response.statusText,
+    headers: Object.fromEntries(response.headers.entries()),
+    body: parseMaybeJson(text)
+  };
+}
+function parseMaybeJson(text) {
+  if (!text) return null;
+  try {
+    return JSON.parse(text);
+  } catch {
+    return text;
+  }
+}
+function normalizeError(err) {
+  if (err instanceof sdk.HavenPaymentStateError) {
+    return {
+      success: false,
+      code: err.code,
+      message: err.message,
+      statusCode: err.statusCode,
+      paymentId: err.paymentId,
+      status: err.status,
+      phase: err.phase,
+      nextAction: err.nextAction,
+      resume_state: err.resumeState,
+      body: err.body
+    };
+  }
+  if (err instanceof sdk.HavenSigningError) {
+    return {
+      success: false,
+      code: err.code,
+      message: err.message
+    };
+  }
+  if (err instanceof sdk.HavenApiError) {
+    const body = err.body;
+    return {
+      success: false,
+      code: err.code,
+      message: err.message,
+      statusCode: err.statusCode,
+      paymentId: err.paymentId,
+      phase: stringOrUndefined(body?.phase),
+      nextAction: stringOrUndefined(body?.nextAction) ?? stringOrUndefined(body?.next_action) ?? sdk.AgentPaymentNextAction.StopAndTellUser,
+      body: err.body
+    };
+  }
+  if (err instanceof sdk.HavenError) {
+    return {
+      success: false,
+      code: err.code,
+      message: err.message,
+      statusCode: err.statusCode,
+      paymentId: err.paymentId
+    };
+  }
+  return {
+    success: false,
+    code: "UNKNOWN_ERROR",
+    message: err instanceof Error ? err.message : String(err),
+    nextAction: sdk.AgentPaymentNextAction.StopAndTellUser
+  };
+}
+function stringOrUndefined(value) {
+  return typeof value === "string" ? value : void 0;
+}
+function computeConsentHash(input) {
+  const allowanceCanonical = [...input.allowanceSummary].map((a) => `${a.token}:${a.amount}:${a.resetMinutes ?? "none"}`).sort().join("|");
+  const toolCanonical = [...input.toolNames].sort().join(",");
+  const identity = [
+    input.apiKeyPrefix,
+    input.apiUrl ?? "",
+    input.agentId ?? "",
+    (input.safeAddress ?? "").toLowerCase(),
+    (input.delegateAddress ?? "").toLowerCase(),
+    input.chainId ?? ""
+  ].join("|");
+  return crypto.createHash("sha256").update(`${identity}
+${toolCanonical}
+${allowanceCanonical}`).digest("hex").slice(0, 16);
+}
+function renderConsentBlock(input, hash) {
+  const lines = [
+    "",
+    "\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500",
+    "Haven MCP server \u2014 first-launch consent",
+    "\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500",
+    "",
+    `Credential: ${input.apiKeyPrefix}\u2026`
+  ];
+  if (input.apiUrl) lines.push(`Haven API: ${input.apiUrl}`);
+  if (input.agentId) lines.push(`Agent ID:  ${input.agentId}`);
+  if (input.safeAddress) lines.push(`Haven wallet (Safe): ${input.safeAddress}`);
+  if (input.delegateAddress) lines.push(`Delegate (local signer): ${input.delegateAddress}`);
+  if (typeof input.chainId === "number") lines.push(`Chain ID:  ${input.chainId}`);
+  lines.push("");
+  lines.push("Confirm these match the Haven wallet and chain you intend the");
+  lines.push("agent runtime to use. The delegate above is the only key that");
+  lines.push("signs payments \u2014 it lives in this process, not on Haven's backend.");
+  lines.push("");
+  lines.push("Tools this server will expose to your agent runtime:");
+  for (const name of input.toolNames) {
+    lines.push(`  \u2022 ${name}`);
+    lines.push(`      ${toolDescriptions[name]}`);
+  }
+  lines.push("");
+  if (input.allowanceSummary.length === 0) {
+    lines.push("On-chain allowance: none configured.");
+    lines.push("  Any payment will queue for manual approval. The on-chain");
+    lines.push("  Safe AllowanceModule is the real spend gate.");
+  } else {
+    lines.push("On-chain allowance (the real spend gate, Safe AllowanceModule):");
+    for (const a of input.allowanceSummary) {
+      const reset = a.resetMinutes ? ` per ${a.resetMinutes} min` : " (no reset)";
+      lines.push(`  \u2022 up to ${a.amount} ${a.token}${reset}`);
+    }
+  }
+  lines.push("");
+  lines.push("Anything above the on-chain allowance pauses for owner approval");
+  lines.push("in the Haven dashboard. Revoking the agent on-chain disables");
+  lines.push("every MCP tool that would spend.");
+  lines.push("");
+  lines.push(`Consent hash: ${hash}`);
+  lines.push("");
+  lines.push("To acknowledge, EITHER:");
+  lines.push(`  \u2022 set HAVEN_MCP_ACK=${hash} in this process's environment, OR`);
+  lines.push("  \u2022 re-run with --ack to write the acknowledgement next to your");
+  lines.push("    credential file (sidecar <credentials>.ack.json).");
+  lines.push("");
+  lines.push("\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500");
+  lines.push("");
+  return lines.join("\n");
+}
+async function ensureConsent(input, options = {}) {
+  const env = options.env ?? process.env;
+  const out = options.out ?? process.stderr;
+  const hash = computeConsentHash(input);
+  if (env.HAVEN_MCP_ACK === "skip") {
+    return { ok: true, hash, reason: "env_var_skip" };
+  }
+  if (typeof env.HAVEN_MCP_ACK === "string" && env.HAVEN_MCP_ACK.length > 0) {
+    if (env.HAVEN_MCP_ACK === hash) {
+      return { ok: true, hash, reason: "env_var_match" };
+    }
+    out.write(renderConsentBlock(input, hash));
+    out.write(
+      `HAVEN_MCP_ACK was set but did not match the current consent hash.
+Expected: ${hash}
+Got:      ${env.HAVEN_MCP_ACK}
+Re-acknowledge with the new hash above, or run with --ack.
+
+`
+    );
+    return { ok: false, hash, reason: "env_var_mismatch" };
+  }
+  const ackPath = sidecarPath(options.credentialsPath);
+  if (ackPath) {
+    const stored = await readAckFile(ackPath);
+    if (stored?.ack === hash) {
+      return { ok: true, hash, reason: "ack_file_match" };
+    }
+  }
+  if (options.writeAck && ackPath) {
+    out.write(renderConsentBlock(input, hash));
+    await writeAckFile(ackPath, hash);
+    out.write(`Wrote acknowledgement to ${ackPath}
+
+`);
+    return { ok: true, hash, reason: "wrote_ack_file" };
+  }
+  out.write(renderConsentBlock(input, hash));
+  return { ok: false, hash, reason: "no_acknowledgement" };
+}
+function sidecarPath(credentialsPath) {
+  if (!credentialsPath) return null;
+  return path.resolve(`${credentialsPath}.ack.json`);
+}
+async function readAckFile(path) {
+  try {
+    const raw = await promises.readFile(path, "utf8");
+    const parsed = JSON.parse(raw);
+    return { ack: typeof parsed.ack === "string" ? parsed.ack : void 0 };
+  } catch {
+    return null;
+  }
+}
+async function writeAckFile(path$1, hash) {
+  await promises.mkdir(path.dirname(path$1), { recursive: true });
+  await promises.writeFile(
+    path$1,
+    JSON.stringify({ ack: hash, at: (/* @__PURE__ */ new Date()).toISOString() }, null, 2),
+    "utf8"
+  );
+}
+async function consentInputFromClient(haven, seed, toolNames) {
+  let allowanceSummary = [];
+  let safeAddress = seed.safeAddress;
+  let delegateAddress;
+  let chainId;
+  try {
+    const summary = await haven.getAllowances();
+    const list = isAllowanceSummary(summary) ? summary.allowances : Array.isArray(summary) ? summary : [];
+    if (isAllowanceSummary(summary)) {
+      safeAddress = summary.safeAddress ?? safeAddress;
+      delegateAddress = summary.delegateAddress;
+      chainId = typeof summary.chainId === "number" ? summary.chainId : chainId;
+    }
+    allowanceSummary = list.map((a) => ({
+      token: a.tokenSymbol ?? "UNKNOWN",
+      amount: a.onchain?.amount ?? a.configuredAmount ?? "0",
+      resetMinutes: typeof a.onchain?.resetTimeMin === "number" ? a.onchain.resetTimeMin : typeof a.resetPeriodMin === "number" ? a.resetPeriodMin : null
+    }));
+  } catch {
+  }
+  return {
+    apiKeyPrefix: derivePrefix(seed.apiKey),
+    apiUrl: seed.apiUrl,
+    agentId: seed.agentId,
+    safeAddress,
+    delegateAddress,
+    chainId,
+    toolNames,
+    allowanceSummary
+  };
+}
+function isAllowanceSummary(value) {
+  return typeof value === "object" && value !== null && "allowances" in value && Array.isArray(value.allowances);
+}
+function derivePrefix(apiKey) {
+  return apiKey.slice(0, 12);
+}
+function registeredToolNames() {
+  return Object.keys(toolSchemas);
+}
+
+// src/server.ts
+async function createHavenClient(options = {}) {
+  const { client } = await resolveHavenClient(options);
+  return client;
+}
+async function resolveHavenClient(options = {}) {
+  const credentials = options.credentials ?? await loadCredentials(options.credentialsPath);
+  const client = new sdk.HavenClient({
+    apiKey: credentials.apiKey,
+    delegateKey: credentials.delegateKey,
+    baseUrl: credentials.apiUrl
+  });
+  return { client, credentials };
+}
+async function createHavenMcpServer(options = {}) {
+  const haven = await createHavenClient(options);
+  return buildMcpServer(haven);
+}
+function buildMcpServer(haven) {
+  const server = new mcp_js.McpServer({
+    name: "@haven_ai/mcp",
+    version: "0.1.0-alpha"
+  });
+  const handlers = createToolHandlers(haven);
+  const registerTool = server.tool.bind(server);
+  for (const name of Object.keys(toolSchemas)) {
+    registerTool(
+      name,
+      toolDescriptions[name],
+      toolSchemas[name],
+      async (args) => haven.withRequestContext(
+        { "X-Haven-MCP-Tool": name },
+        async () => toMcpResult(await handlers[name](args))
+      )
+    );
+  }
+  return server;
+}
+async function runStdioServer(options = {}) {
+  const { client: haven, credentials } = await resolveHavenClient(options);
+  if (!options.skipConsent) {
+    const decision = await runConsentGate(haven, credentials, options);
+    if (!decision.ok) {
+      const err = new Error(
+        decision.reason === "env_var_mismatch" ? "Haven MCP consent acknowledgement does not match the current configuration." : "Haven MCP server requires a one-time consent acknowledgement before starting."
+      );
+      err.code = "HAVEN_MCP_NO_CONSENT";
+      throw err;
+    }
+  }
+  const server = buildMcpServer(haven);
+  await server.connect(new stdio_js.StdioServerTransport());
+}
+async function runConsentGate(haven, credentials, options) {
+  const toolNames = registeredToolNames();
+  const input = await consentInputFromClient(
+    haven,
+    {
+      apiKey: credentials.apiKey,
+      apiUrl: credentials.apiUrl,
+      agentId: credentials.agentId,
+      safeAddress: credentials.safeAddress
+    },
+    toolNames
+  );
+  const credentialsPath = options.credentialsPath ?? credentials.sourcePath;
+  return ensureConsent(input, {
+    credentialsPath,
+    writeAck: options.writeAck
+  });
+}
+function toMcpResult(payload) {
+  return {
+    isError: !payload.success,
+    content: [
+      {
+        type: "text",
+        text: JSON.stringify(payload, null, 2)
+      }
+    ]
+  };
+}
+
+exports.createHavenClient = createHavenClient;
+exports.createHavenMcpServer = createHavenMcpServer;
+exports.createToolHandlers = createToolHandlers;
+exports.loadCredentials = loadCredentials;
+exports.runStdioServer = runStdioServer;
+exports.toolDescriptions = toolDescriptions;
+exports.toolSchemas = toolSchemas;
+//# sourceMappingURL=index.cjs.map
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/credentials.ts","../src/tools.ts","../src/consent.ts","../src/server.ts"],"names":["readFile","z","HavenApiError","HavenPaymentStateError","HavenSigningError","AgentPaymentNextAction","HavenError","createHash","resolve","path","mkdir","dirname","writeFile","HavenClient","McpServer","StdioServerTransport"],"mappings":";;;;;;;;;;;AAgDA,eAAsB,eAAA,CACpB,IAAA,GAA2B,OAAA,CAAQ,GAAA,CAAI,iBAAA,EACT;AAC9B,EAAA,IAAI,IAAA,EAAM;AACR,IAAA,OAAO,wBAAwB,IAAI,CAAA;AAAA,EACrC;AAEA,EAAA,MAAM,WAAW,sBAAA,EAAuB;AACxC,EAAA,IAAI,UAAU,OAAO,QAAA;AAErB,EAAA,MAAM,IAAI,KAAA;AAAA,IACR;AAAA,GAEF;AACF;AAEA,eAAe,wBAAwB,IAAA,EAA4C;AACjF,EAAA,IAAI,OAAA;AACJ,EAAA,IAAI;AACF,IAAA,OAAA,GAAU,MAAMA,iBAAA,CAAS,IAAA,EAAM,MAAM,CAAA;AAAA,EACvC,SAAS,GAAA,EAAK;AACZ,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,oCAAA,EAAuC,IAAI,CAAA,EAAA,EAAK,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAC,CAAA,CAAE,CAAA;AAAA,EACpH;AAEA,EAAA,IAAI,GAAA;AACJ,EAAA,IAAI;AACF,IAAA,GAAA,GAAM,IAAA,CAAK,MAAM,OAAO,CAAA;AAAA,EAC1B,CAAA,CAAA,MAAQ;AACN,IAAA,MAAM,IAAI,MAAM,sEAAsE,CAAA;AAAA,EACxF;AAEA,EAAA,MAAM,MAAA,GAAS,WAAA,CAAY,GAAA,CAAI,OAAA,IAAW,IAAI,MAAM,CAAA;AACpD,EAAA,MAAM,WAAA,GAAc,WAAA,CAAY,GAAA,CAAI,YAAA,IAAgB,IAAI,WAAW,CAAA;AAEnE,EAAA,IAAI,CAAC,MAAA,EAAQ;AACX,IAAA,MAAM,IAAI,MAAM,wCAAwC,CAAA;AAAA,EAC1D;AACA,EAAA,IAAI,CAAC,WAAA,EAAa;AAChB,IAAA,MAAM,IAAI,MAAM,oEAAoE,CAAA;AAAA,EACtF;AAEA,EAAA,OAAO;AAAA,IACL,MAAA;AAAA,IACA,WAAA;AAAA,IACA,OAAA,EAAS,WAAA,CAAY,GAAA,CAAI,QAAA,IAAY,IAAI,OAAO,CAAA;AAAA,IAChD,WAAA,EAAa,WAAA,CAAY,GAAA,CAAI,YAAA,IAAgB,IAAI,WAAW,CAAA;AAAA,IAC5D,MAAA,EAAQ,WAAA,CAAY,GAAA,CAAI,OAAA,IAAW,IAAI,MAAM,CAAA;AAAA,IAC7C,UAAA,EAAY;AAAA,GACd;AACF;AAEA,SAAS,sBAAA,GAAqD;AAC5D,EAAA,MAAM,MAAA,GAAS,WAAA,CAAY,OAAA,CAAQ,GAAA,CAAI,aAAa,CAAA;AACpD,EAAA,MAAM,WAAA,GAAc,WAAA,CAAY,OAAA,CAAQ,GAAA,CAAI,kBAAkB,CAAA;AAE9D,EAAA,IAAI,CAAC,MAAA,IAAU,CAAC,WAAA,EAAa,OAAO,IAAA;AAEpC,EAAA,IAAI,CAAC,MAAA,EAAQ;AACX,IAAA,MAAM,IAAI,MAAM,yDAAyD,CAAA;AAAA,EAC3E;AACA,EAAA,IAAI,CAAC,WAAA,EAAa;AAChB,IAAA,MAAM,IAAI,MAAM,8HAA8H,CAAA;AAAA,EAChJ;AAEA,EAAA,OAAO;AAAA,IACL,MAAA;AAAA,IACA,WAAA;AAAA,IACA,OAAA,EAAS,WAAA,CAAY,OAAA,CAAQ,GAAA,CAAI,cAAc,CAAA;AAAA,IAC/C,WAAA,EAAa,WAAA,CAAY,OAAA,CAAQ,GAAA,CAAI,kBAAkB,CAAA;AAAA,IACvD,MAAA,EAAQ,WAAA,CAAY,OAAA,CAAQ,GAAA,CAAI,aAAa;AAAA,GAC/C;AACF;AAEA,SAAS,YAAY,KAAA,EAAoC;AACvD,EAAA,OAAO,OAAO,UAAU,QAAA,IAAY,KAAA,CAAM,MAAK,GAAI,KAAA,CAAM,MAAK,GAAI,MAAA;AACpE;AC5GA,IAAM,aAAA,GAAgBC,IAAA,CAAE,MAAA,CAAOA,IAAA,CAAE,MAAA,IAAUA,IAAA,CAAE,MAAA,EAAQ,CAAA,CAAE,QAAA,EAAS;AAezD,IAAM,WAAA,GAAuD;AAAA,EAClE,gBAAA,EAAkB;AAAA,IAChB,GAAA,EAAKA,IAAA,CAAE,MAAA,EAAO,CAAE,GAAA,EAAI;AAAA,IACpB,MAAA,EAAQA,IAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IAC5B,OAAA,EAAS,aAAA;AAAA,IACT,IAAA,EAAMA,IAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IAC1B,cAAA,EAAgBA,IAAA,CAAE,MAAA,EAAO,CAAE,QAAA;AAAS,GACtC;AAAA,EACA,oBAAA,EAAsB;AAAA,IACpB,KAAA,EAAOA,KAAE,OAAA,EAAQ;AAAA,IACjB,cAAA,EAAgBA,IAAA,CAAE,MAAA,EAAO,CAAE,QAAA;AAAS,GACtC;AAAA,EACA,yBAAA,EAA2B;AAAA,IACzB,UAAA,EAAYA,IAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IAChC,YAAA,EAAcA,IAAA,CAAE,OAAA,EAAQ,CAAE,QAAA;AAAS,GACrC;AAAA,EACA,eAAA,EAAiB;AAAA,IACf,KAAKA,IAAA,CAAE,MAAA,EAAO,CAAE,GAAA,GAAM,QAAA,EAAS;AAAA,IAC/B,SAAA,EAAWA,IAAA,CAAE,OAAA,EAAQ,CAAE,QAAA,EAAS;AAAA,IAChC,MAAA,EAAQA,IAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IAC5B,OAAA,EAAS,aAAA;AAAA,IACT,IAAA,EAAMA,IAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IAC1B,cAAA,EAAgBA,IAAA,CAAE,MAAA,EAAO,CAAE,QAAA;AAAS,GACtC;AAAA,EACA,uBAAA,EAAyB;AAAA,IACvB,KAAA,EAAOA,KAAE,OAAA,EAAQ;AAAA,IACjB,cAAA,EAAgBA,IAAA,CAAE,MAAA,EAAO,CAAE,QAAA;AAAS,GACtC;AAAA,EACA,wBAAA,EAA0B;AAAA,IACxB,UAAA,EAAYA,IAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IAChC,YAAA,EAAcA,IAAA,CAAE,OAAA,EAAQ,CAAE,QAAA;AAAS,GACrC;AAAA,EACA,wBAAA,EAA0B;AAAA,IACxB,UAAA,EAAYA,KAAE,MAAA;AAAO,GACvB;AAAA,EACA,sBAAA,EAAwB;AAAA,IACtB,UAAA,EAAYA,KAAE,MAAA;AAAO,GACvB;AAAA,EACA,iBAAiB,EAAC;AAAA,EAClB,sBAAsB,EAAC;AAAA,EACvB,mBAAA,EAAqB;AAAA,IACnB,KAAA,EAAOA,IAAA,CAAE,MAAA,EAAO,CAAE,GAAA,EAAI,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,GAAG,CAAA,CAAE,QAAA;AAAS;AAErD;AAEO,IAAM,gBAAA,GAAqD;AAAA,EAChE,gBAAA,EACE,wHAAA;AAAA,EACF,oBAAA,EACE,0RAAA;AAAA,EACF,yBAAA,EACE,yOAAA;AAAA,EACF,eAAA,EACE,+HAAA;AAAA,EACF,uBAAA,EACE,0NAAA;AAAA,EACF,wBAAA,EACE,iKAAA;AAAA,EACF,wBAAA,EACE,oGAAA;AAAA,EACF,sBAAA,EACE,8IAAA;AAAA,EACF,eAAA,EACE,6FAAA;AAAA,EACF,oBAAA,EACE,wHAAA;AAAA,EACF,mBAAA,EACE;AACJ;AAsBO,SAAS,mBAAmB,KAAA,EAAwF;AACzH,EAAA,OAAO;AAAA,IACL,gBAAA,EAAkB,OAAO,KAAA,KAAU;AACjC,MAAA,MAAM,IAAA,GAAO,WAAA,CAAY,kBAAA,EAAoB,KAAK,CAAA;AAClD,MAAA,OAAO,OAAA,CAAQ,YAAY,KAAA,CAAM,SAAA,CAAU,KAAK,GAAA,EAAK,WAAA,CAAY,IAAI,CAAA,EAAG,EAAE,cAAA,EAAgB,IAAA,CAAK,cAAA,EAAgB,CAAC,CAAA;AAAA,IAClH,CAAA;AAAA,IAEA,oBAAA,EAAsB,OAAO,KAAA,KAAU;AACrC,MAAA,MAAM,IAAA,GAAO,WAAA,CAAY,sBAAA,EAAwB,KAAK,CAAA;AACtD,MAAA,OAAO,QAAQ,YAAY;AACzB,QAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,YAAA,CAAa,IAAA,CAAK,OAAoB,EAAE,cAAA,EAAgB,IAAA,CAAK,cAAA,EAAgB,CAAA;AAC1G,QAAA,OAAO,gBAAgB,QAAQ,CAAA;AAAA,MACjC,CAAC,CAAA;AAAA,IACH,CAAA;AAAA,IAEA,yBAAA,EAA2B,OAAO,KAAA,KAAU;AAC1C,MAAA,MAAM,IAAA,GAAO,WAAA,CAAY,2BAAA,EAA6B,KAAK,CAAA;AAC3D,MAAA,OAAO,QAAQ,YAAY;AACzB,QAAA,MAAM,KAAA,GAAQ,MAAM,WAAA,CAAY,IAAA,EAAM,MAAM,CAAA;AAC5C,QAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,iBAAA,CAAkB,KAAK,CAAA;AACpD,QAAA,OAAO,gBAAgB,QAAQ,CAAA;AAAA,MACjC,CAAC,CAAA;AAAA,IACH,CAAA;AAAA,IAEA,eAAA,EAAiB,OAAO,KAAA,KAAU;AAChC,MAAA,MAAM,IAAA,GAAO,WAAA,CAAY,iBAAA,EAAmB,KAAK,CAAA;AACjD,MAAA,OAAO,QAAQ,YAAY;AACzB,QAAA,IAAI,KAAK,SAAA,EAAW;AAClB,UAAA,OAAO,MAAM,QAAA,CAAS,IAAA,CAAK,SAAA,EAAsC,WAAA,CAAY,IAAI,CAAA,EAAG;AAAA,YAClF,gBAAgB,IAAA,CAAK;AAAA,WACtB,CAAA;AAAA,QACH;AACA,QAAA,IAAI,CAAC,KAAK,GAAA,EAAK;AACb,UAAA,MAAM,IAAIC,iBAAA,CAAc,mDAAA,EAAqD,GAAG,CAAA;AAAA,QAClF;AACA,QAAA,OAAO,KAAA,CAAM,QAAA,CAAS,IAAA,CAAK,GAAA,EAAK,WAAA,CAAY,IAAI,CAAA,EAAG,EAAE,cAAA,EAAgB,IAAA,CAAK,cAAA,EAAgB,CAAA;AAAA,MAC5F,CAAC,CAAA;AAAA,IACH,CAAA;AAAA,IAEA,uBAAA,EAAyB,OAAO,KAAA,KAAU;AACxC,MAAA,MAAM,IAAA,GAAO,WAAA,CAAY,yBAAA,EAA2B,KAAK,CAAA;AACzD,MAAA,OAAO,QAAQ,YAAY;AACzB,QAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,eAAA,CAAgB,IAAA,CAAK,OAAmB,EAAE,cAAA,EAAgB,IAAA,CAAK,cAAA,EAAgB,CAAA;AAC5G,QAAA,OAAO,gBAAgB,QAAQ,CAAA;AAAA,MACjC,CAAC,CAAA;AAAA,IACH,CAAA;AAAA,IAEA,wBAAA,EAA0B,OAAO,KAAA,KAAU;AACzC,MAAA,MAAM,IAAA,GAAO,WAAA,CAAY,0BAAA,EAA4B,KAAK,CAAA;AAC1D,MAAA,OAAO,QAAQ,YAAY;AACzB,QAAA,MAAM,KAAA,GAAQ,MAAM,WAAA,CAAY,IAAA,EAAM,KAAK,CAAA;AAC3C,QAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,gBAAA,CAAiB,KAAK,CAAA;AACnD,QAAA,OAAO,gBAAgB,QAAQ,CAAA;AAAA,MACjC,CAAC,CAAA;AAAA,IACH,CAAA;AAAA,IAEA,wBAAA,EAA0B,OAAO,KAAA,KAAU;AACzC,MAAA,MAAM,IAAA,GAAO,WAAA,CAAY,0BAAA,EAA4B,KAAK,CAAA;AAC1D,MAAA,OAAO,QAAQ,YAAY,KAAA,CAAM,gBAAA,CAAiB,IAAA,CAAK,UAAU,CAAC,CAAA;AAAA,IACpE,CAAA;AAAA,IAEA,sBAAA,EAAwB,OAAO,KAAA,KAAU;AACvC,MAAA,MAAM,IAAA,GAAO,WAAA,CAAY,wBAAA,EAA0B,KAAK,CAAA;AACxD,MAAA,OAAO,QAAQ,YAAY,KAAA,CAAM,cAAA,CAAe,IAAA,CAAK,UAAU,CAAC,CAAA;AAAA,IAClE,CAAA;AAAA,IAEA,iBAAiB,YAAY,OAAA,CAAQ,YAAY,KAAA,CAAM,UAAU,CAAA;AAAA,IACjE,sBAAsB,YAAY,OAAA,CAAQ,YAAY,KAAA,CAAM,eAAe,CAAA;AAAA,IAC3E,mBAAA,EAAqB,OAAO,KAAA,KAAU;AACpC,MAAA,MAAM,IAAA,GAAO,WAAA,CAAY,qBAAA,EAAuB,KAAK,CAAA;AACrD,MAAA,OAAO,OAAA,CAAQ,YAAY,KAAA,CAAM,YAAA,CAAa,EAAE,KAAA,EAAO,IAAA,CAAK,KAAA,EAAO,CAAC,CAAA;AAAA,IACtE;AAAA,GACF;AAEA,EAAA,eAAe,WAAA,CACb,MACA,IAAA,EAC2C;AAC3C,IAAA,MAAM,KAAA,GACJ,IAAA,CAAK,YAAA,KACJ,IAAA,CAAK,UAAA,GAAa,MAAM,KAAA,CAAM,cAAA,CAAe,IAAA,CAAK,UAAU,CAAA,GAAI,MAAA,CAAA;AAEnE,IAAA,IAAI,CAAC,KAAA,IAAS,OAAO,KAAA,KAAU,QAAA,EAAU;AACvC,MAAA,MAAM,IAAIA,iBAAA,CAAc,CAAA,aAAA,EAAgB,IAAI,iDAAiD,GAAG,CAAA;AAAA,IAClG;AAEA,IAAA,IAAK,KAAA,CAA6B,SAAS,IAAA,EAAM;AAC/C,MAAA,MAAM,IAAIA,iBAAA,CAAc,CAAA,4BAAA,EAA+B,IAAI,CAAA,MAAA,CAAA,EAAU,KAAK,KAAK,CAAA;AAAA,IACjF;AAEA,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AAEA,SAAS,WAAA,CACP,MACA,KAAA,EACqB;AACrB,EAAA,OAAOD,IAAA,CAAE,OAAO,WAAA,CAAY,IAAI,CAAC,CAAA,CAAE,KAAA,CAAM,KAAA,IAAS,EAAE,CAAA;AACtD;AAEA,SAAS,YAAY,KAAA,EAAsG;AACzH,EAAA,IAAI,CAAC,MAAM,MAAA,IAAU,CAAC,MAAM,OAAA,IAAW,KAAA,CAAM,IAAA,KAAS,MAAA,EAAW,OAAO,MAAA;AACxE,EAAA,OAAO;AAAA,IACL,QAAQ,KAAA,CAAM,MAAA;AAAA,IACd,SAAS,KAAA,CAAM,OAAA;AAAA,IACf,MAAM,KAAA,CAAM;AAAA,GACd;AACF;AAEA,eAAe,QAAW,EAAA,EAA+C;AACvE,EAAA,IAAI;AACF,IAAA,OAAO,EAAE,OAAA,EAAS,IAAA,EAAM,IAAA,EAAM,MAAM,IAAG,EAAE;AAAA,EAC3C,SAAS,GAAA,EAAK;AACZ,IAAA,OAAO,eAAe,GAAG,CAAA;AAAA,EAC3B;AACF;AAEA,eAAe,gBAAgB,QAAA,EAAsD;AACnF,EAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,EAAA,OAAO;AAAA,IACL,QAAQ,QAAA,CAAS,MAAA;AAAA,IACjB,YAAY,QAAA,CAAS,UAAA;AAAA,IACrB,SAAS,MAAA,CAAO,WAAA,CAAY,QAAA,CAAS,OAAA,CAAQ,SAAS,CAAA;AAAA,IACtD,IAAA,EAAM,eAAe,IAAI;AAAA,GAC3B;AACF;AAEA,SAAS,eAAe,IAAA,EAAuB;AAC7C,EAAA,IAAI,CAAC,MAAM,OAAO,IAAA;AAClB,EAAA,IAAI;AACF,IAAA,OAAO,IAAA,CAAK,MAAM,IAAI,CAAA;AAAA,EACxB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAEA,SAAS,eAAe,GAAA,EAA2B;AACjD,EAAA,IAAI,eAAeE,0BAAA,EAAwB;AACzC,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,MAAM,GAAA,CAAI,IAAA;AAAA,MACV,SAAS,GAAA,CAAI,OAAA;AAAA,MACb,YAAY,GAAA,CAAI,UAAA;AAAA,MAChB,WAAW,GAAA,CAAI,SAAA;AAAA,MACf,QAAQ,GAAA,CAAI,MAAA;AAAA,MACZ,OAAO,GAAA,CAAI,KAAA;AAAA,MACX,YAAY,GAAA,CAAI,UAAA;AAAA,MAChB,cAAc,GAAA,CAAI,WAAA;AAAA,MAClB,MAAM,GAAA,CAAI;AAAA,KACZ;AAAA,EACF;AAEA,EAAA,IAAI,eAAeC,qBAAA,EAAmB;AACpC,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,MAAM,GAAA,CAAI,IAAA;AAAA,MACV,SAAS,GAAA,CAAI;AAAA,KACf;AAAA,EACF;AAEA,EAAA,IAAI,eAAeF,iBAAA,EAAe;AAChC,IAAA,MAAM,OAAO,GAAA,CAAI,IAAA;AACjB,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,MAAM,GAAA,CAAI,IAAA;AAAA,MACV,SAAS,GAAA,CAAI,OAAA;AAAA,MACb,YAAY,GAAA,CAAI,UAAA;AAAA,MAChB,WAAW,GAAA,CAAI,SAAA;AAAA,MACf,KAAA,EAAO,iBAAA,CAAkB,IAAA,EAAM,KAAK,CAAA;AAAA,MACpC,UAAA,EACE,kBAAkB,IAAA,EAAM,UAAU,KAClC,iBAAA,CAAkB,IAAA,EAAM,WAAW,CAAA,IACnCG,0BAAA,CAAuB,eAAA;AAAA,MACzB,MAAM,GAAA,CAAI;AAAA,KACZ;AAAA,EACF;AAEA,EAAA,IAAI,eAAeC,cAAA,EAAY;AAC7B,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,MAAM,GAAA,CAAI,IAAA;AAAA,MACV,SAAS,GAAA,CAAI,OAAA;AAAA,MACb,YAAY,GAAA,CAAI,UAAA;AAAA,MAChB,WAAW,GAAA,CAAI;AAAA,KACjB;AAAA,EACF;AAEA,EAAA,OAAO;AAAA,IACL,OAAA,EAAS,KAAA;AAAA,IACT,IAAA,EAAM,eAAA;AAAA,IACN,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG,CAAA;AAAA,IACxD,YAAYD,0BAAA,CAAuB;AAAA,GACrC;AACF;AAEA,SAAS,kBAAkB,KAAA,EAAoC;AAC7D,EAAA,OAAO,OAAO,KAAA,KAAU,QAAA,GAAW,KAAA,GAAQ,MAAA;AAC7C;ACvPO,SAAS,mBAAmB,KAAA,EAA6B;AAC9D,EAAA,MAAM,kBAAA,GAAqB,CAAC,GAAG,KAAA,CAAM,gBAAgB,EAClD,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,EAAG,CAAA,CAAE,KAAK,IAAI,CAAA,CAAE,MAAM,CAAA,CAAA,EAAI,CAAA,CAAE,YAAA,IAAgB,MAAM,EAAE,CAAA,CAC/D,IAAA,EAAK,CACL,IAAA,CAAK,GAAG,CAAA;AACX,EAAA,MAAM,aAAA,GAAgB,CAAC,GAAG,KAAA,CAAM,SAAS,CAAA,CAAE,IAAA,EAAK,CAAE,IAAA,CAAK,GAAG,CAAA;AAM1D,EAAA,MAAM,QAAA,GAAW;AAAA,IACf,KAAA,CAAM,YAAA;AAAA,IACN,MAAM,MAAA,IAAU,EAAA;AAAA,IAChB,MAAM,OAAA,IAAW,EAAA;AAAA,IAAA,CAChB,KAAA,CAAM,WAAA,IAAe,EAAA,EAAI,WAAA,EAAY;AAAA,IAAA,CACrC,KAAA,CAAM,eAAA,IAAmB,EAAA,EAAI,WAAA,EAAY;AAAA,IAC1C,MAAM,OAAA,IAAW;AAAA,GACnB,CAAE,KAAK,GAAG,CAAA;AACV,EAAA,OAAOE,iBAAA,CAAW,QAAQ,CAAA,CACvB,MAAA,CAAO,GAAG,QAAQ;AAAA,EAAK,aAAa;AAAA,EAAK,kBAAkB,EAAE,CAAA,CAC7D,MAAA,CAAO,KAAK,CAAA,CACZ,KAAA,CAAM,GAAG,EAAE,CAAA;AAChB;AAEO,SAAS,kBAAA,CAAmB,OAAqB,IAAA,EAAsB;AAC5E,EAAA,MAAM,KAAA,GAAkB;AAAA,IACtB,EAAA;AAAA,IACA,0WAAA;AAAA,IACA,8CAAA;AAAA,IACA,0WAAA;AAAA,IACA,EAAA;AAAA,IACA,CAAA,YAAA,EAAe,MAAM,YAAY,CAAA,MAAA;AAAA,GACnC;AACA,EAAA,IAAI,MAAM,MAAA,EAAQ,KAAA,CAAM,KAAK,CAAA,WAAA,EAAc,KAAA,CAAM,MAAM,CAAA,CAAE,CAAA;AACzD,EAAA,IAAI,MAAM,OAAA,EAAS,KAAA,CAAM,KAAK,CAAA,WAAA,EAAc,KAAA,CAAM,OAAO,CAAA,CAAE,CAAA;AAC3D,EAAA,IAAI,MAAM,WAAA,EAAa,KAAA,CAAM,KAAK,CAAA,qBAAA,EAAwB,KAAA,CAAM,WAAW,CAAA,CAAE,CAAA;AAC7E,EAAA,IAAI,MAAM,eAAA,EAAiB,KAAA,CAAM,KAAK,CAAA,yBAAA,EAA4B,KAAA,CAAM,eAAe,CAAA,CAAE,CAAA;AACzF,EAAA,IAAI,OAAO,MAAM,OAAA,KAAY,QAAA,QAAgB,IAAA,CAAK,CAAA,WAAA,EAAc,KAAA,CAAM,OAAO,CAAA,CAAE,CAAA;AAC/E,EAAA,KAAA,CAAM,KAAK,EAAE,CAAA;AACb,EAAA,KAAA,CAAM,KAAK,+DAA+D,CAAA;AAC1E,EAAA,KAAA,CAAM,KAAK,+DAA+D,CAAA;AAC1E,EAAA,KAAA,CAAM,KAAK,yEAAqE,CAAA;AAChF,EAAA,KAAA,CAAM,KAAK,EAAE,CAAA;AACb,EAAA,KAAA,CAAM,KAAK,sDAAsD,CAAA;AACjE,EAAA,KAAA,MAAW,IAAA,IAAQ,MAAM,SAAA,EAAW;AAClC,IAAA,KAAA,CAAM,IAAA,CAAK,CAAA,SAAA,EAAO,IAAI,CAAA,CAAE,CAAA;AACxB,IAAA,KAAA,CAAM,IAAA,CAAK,CAAA,MAAA,EAAS,gBAAA,CAAiB,IAAI,CAAC,CAAA,CAAE,CAAA;AAAA,EAC9C;AACA,EAAA,KAAA,CAAM,KAAK,EAAE,CAAA;AACb,EAAA,IAAI,KAAA,CAAM,gBAAA,CAAiB,MAAA,KAAW,CAAA,EAAG;AACvC,IAAA,KAAA,CAAM,KAAK,sCAAsC,CAAA;AACjD,IAAA,KAAA,CAAM,KAAK,4DAA4D,CAAA;AACvE,IAAA,KAAA,CAAM,KAAK,gDAAgD,CAAA;AAAA,EAC7D,CAAA,MAAO;AACL,IAAA,KAAA,CAAM,KAAK,iEAAiE,CAAA;AAC5E,IAAA,KAAA,MAAW,CAAA,IAAK,MAAM,gBAAA,EAAkB;AACtC,MAAA,MAAM,QAAQ,CAAA,CAAE,YAAA,GAAe,CAAA,KAAA,EAAQ,CAAA,CAAE,YAAY,CAAA,IAAA,CAAA,GAAS,aAAA;AAC9D,MAAA,KAAA,CAAM,IAAA,CAAK,kBAAa,CAAA,CAAE,MAAM,IAAI,CAAA,CAAE,KAAK,CAAA,EAAG,KAAK,CAAA,CAAE,CAAA;AAAA,IACvD;AAAA,EACF;AACA,EAAA,KAAA,CAAM,KAAK,EAAE,CAAA;AACb,EAAA,KAAA,CAAM,KAAK,iEAAiE,CAAA;AAC5E,EAAA,KAAA,CAAM,KAAK,8DAA8D,CAAA;AACzE,EAAA,KAAA,CAAM,KAAK,kCAAkC,CAAA;AAC7C,EAAA,KAAA,CAAM,KAAK,EAAE,CAAA;AACb,EAAA,KAAA,CAAM,IAAA,CAAK,CAAA,cAAA,EAAiB,IAAI,CAAA,CAAE,CAAA;AAClC,EAAA,KAAA,CAAM,KAAK,EAAE,CAAA;AACb,EAAA,KAAA,CAAM,KAAK,yBAAyB,CAAA;AACpC,EAAA,KAAA,CAAM,IAAA,CAAK,CAAA,2BAAA,EAAyB,IAAI,CAAA,kCAAA,CAAqC,CAAA;AAC7E,EAAA,KAAA,CAAM,KAAK,sEAAiE,CAAA;AAC5E,EAAA,KAAA,CAAM,KAAK,uDAAuD,CAAA;AAClE,EAAA,KAAA,CAAM,KAAK,EAAE,CAAA;AACb,EAAA,KAAA,CAAM,KAAK,0WAA8D,CAAA;AACzE,EAAA,KAAA,CAAM,KAAK,EAAE,CAAA;AACb,EAAA,OAAO,KAAA,CAAM,KAAK,IAAI,CAAA;AACxB;AAGA,eAAsB,aAAA,CACpB,KAAA,EACA,OAAA,GAA0B,EAAC,EACD;AAC1B,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,GAAA,IAAO,OAAA,CAAQ,GAAA;AACnC,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,GAAA,IAAO,OAAA,CAAQ,MAAA;AACnC,EAAA,MAAM,IAAA,GAAO,mBAAmB,KAAK,CAAA;AAGrC,EAAA,IAAI,GAAA,CAAI,kBAAkB,MAAA,EAAQ;AAChC,IAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,IAAA,EAAM,QAAQ,cAAA,EAAe;AAAA,EAClD;AAGA,EAAA,IAAI,OAAO,GAAA,CAAI,aAAA,KAAkB,YAAY,GAAA,CAAI,aAAA,CAAc,SAAS,CAAA,EAAG;AACzE,IAAA,IAAI,GAAA,CAAI,kBAAkB,IAAA,EAAM;AAC9B,MAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,IAAA,EAAM,QAAQ,eAAA,EAAgB;AAAA,IACnD;AACA,IAAA,GAAA,CAAI,KAAA,CAAM,kBAAA,CAAmB,KAAA,EAAO,IAAI,CAAC,CAAA;AACzC,IAAA,GAAA,CAAI,KAAA;AAAA,MACF,CAAA;AAAA,UAAA,EACa,IAAI;AAAA,UAAA,EACJ,IAAI,aAAa;AAAA;;AAAA;AAAA,KAEhC;AACA,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,IAAA,EAAM,QAAQ,kBAAA,EAAmB;AAAA,EACvD;AAGA,EAAA,MAAM,OAAA,GAAU,WAAA,CAAY,OAAA,CAAQ,eAAe,CAAA;AACnD,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,MAAM,MAAA,GAAS,MAAM,WAAA,CAAY,OAAO,CAAA;AACxC,IAAA,IAAI,MAAA,EAAQ,QAAQ,IAAA,EAAM;AACxB,MAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,IAAA,EAAM,QAAQ,gBAAA,EAAiB;AAAA,IACpD;AAAA,EACF;AAGA,EAAA,IAAI,OAAA,CAAQ,YAAY,OAAA,EAAS;AAC/B,IAAA,GAAA,CAAI,KAAA,CAAM,kBAAA,CAAmB,KAAA,EAAO,IAAI,CAAC,CAAA;AACzC,IAAA,MAAM,YAAA,CAAa,SAAS,IAAI,CAAA;AAChC,IAAA,GAAA,CAAI,KAAA,CAAM,4BAA4B,OAAO;;AAAA,CAAM,CAAA;AACnD,IAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,IAAA,EAAM,QAAQ,gBAAA,EAAiB;AAAA,EACpD;AAGA,EAAA,GAAA,CAAI,KAAA,CAAM,kBAAA,CAAmB,KAAA,EAAO,IAAI,CAAC,CAAA;AACzC,EAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,IAAA,EAAM,QAAQ,oBAAA,EAAqB;AACzD;AAEA,SAAS,YAAY,eAAA,EAAyC;AAC5D,EAAA,IAAI,CAAC,iBAAiB,OAAO,IAAA;AAC7B,EAAA,OAAOC,YAAA,CAAQ,CAAA,EAAG,eAAe,CAAA,SAAA,CAAW,CAAA;AAC9C;AAEA,eAAe,YAAY,IAAA,EAAgD;AACzE,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAMR,iBAAAA,CAAS,IAAA,EAAM,MAAM,CAAA;AACvC,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA;AAC7B,IAAA,OAAO,EAAE,KAAK,OAAO,MAAA,CAAO,QAAQ,QAAA,GAAW,MAAA,CAAO,MAAM,KAAA,CAAA,EAAU;AAAA,EACxE,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAEA,eAAe,YAAA,CAAaS,QAAc,IAAA,EAA6B;AACrE,EAAA,MAAMC,eAAMC,YAAA,CAAQF,MAAI,GAAG,EAAE,SAAA,EAAW,MAAM,CAAA;AAC9C,EAAA,MAAMG,kBAAA;AAAA,IACJH,MAAA;AAAA,IACA,IAAA,CAAK,SAAA,CAAU,EAAE,GAAA,EAAK,IAAA,EAAM,EAAA,EAAA,iBAAI,IAAI,IAAA,EAAK,EAAE,WAAA,EAAY,EAAE,EAAG,MAAM,CAAC,CAAA;AAAA,IACnE;AAAA,GACF;AACF;AAqBA,eAAsB,sBAAA,CACpB,KAAA,EACA,IAAA,EACA,SAAA,EACuB;AACvB,EAAA,IAAI,mBAAqD,EAAC;AAC1D,EAAA,IAAI,cAAc,IAAA,CAAK,WAAA;AACvB,EAAA,IAAI,eAAA;AACJ,EAAA,IAAI,OAAA;AAEJ,EAAA,IAAI;AACF,IAAA,MAAM,OAAA,GAAU,MAAM,KAAA,CAAM,aAAA,EAAc;AAC1C,IAAA,MAAM,IAAA,GAAyB,kBAAA,CAAmB,OAAO,CAAA,GACrD,OAAA,CAAQ,UAAA,GACR,KAAA,CAAM,OAAA,CAAQ,OAAO,CAAA,GAClB,OAAA,GACD,EAAC;AACP,IAAA,IAAI,kBAAA,CAAmB,OAAO,CAAA,EAAG;AAC/B,MAAA,WAAA,GAAc,QAAQ,WAAA,IAAe,WAAA;AACrC,MAAA,eAAA,GAAkB,OAAA,CAAQ,eAAA;AAC1B,MAAA,OAAA,GAAU,OAAO,OAAA,CAAQ,OAAA,KAAY,QAAA,GAAW,QAAQ,OAAA,GAAU,OAAA;AAAA,IACpE;AACA,IAAA,gBAAA,GAAmB,IAAA,CAAK,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,MAClC,KAAA,EAAO,EAAE,WAAA,IAAe,SAAA;AAAA,MACxB,MAAA,EAAQ,CAAA,CAAE,OAAA,EAAS,MAAA,IAAU,EAAE,gBAAA,IAAoB,GAAA;AAAA,MACnD,YAAA,EACE,OAAO,CAAA,CAAE,OAAA,EAAS,iBAAiB,QAAA,GAC/B,CAAA,CAAE,OAAA,CAAQ,YAAA,GACV,OAAO,CAAA,CAAE,cAAA,KAAmB,QAAA,GAC1B,EAAE,cAAA,GACF;AAAA,KACV,CAAE,CAAA;AAAA,EACJ,CAAA,CAAA,MAAQ;AAAA,EAER;AAEA,EAAA,OAAO;AAAA,IACL,YAAA,EAAc,YAAA,CAAa,IAAA,CAAK,MAAM,CAAA;AAAA,IACtC,QAAQ,IAAA,CAAK,MAAA;AAAA,IACb,SAAS,IAAA,CAAK,OAAA;AAAA,IACd,WAAA;AAAA,IACA,eAAA;AAAA,IACA,OAAA;AAAA,IACA,SAAA;AAAA,IACA;AAAA,GACF;AACF;AAEA,SAAS,mBAAmB,KAAA,EAAgD;AAC1E,EAAA,OACE,OAAO,KAAA,KAAU,QAAA,IACjB,KAAA,KAAU,IAAA,IACV,gBAAgB,KAAA,IAChB,KAAA,CAAM,OAAA,CAAS,KAAA,CAAkC,UAAU,CAAA;AAE/D;AAQA,SAAS,aAAa,MAAA,EAAwB;AAC5C,EAAA,OAAO,MAAA,CAAO,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA;AAC3B;AAGO,SAAS,mBAAA,GAA0C;AACxD,EAAA,OAAO,MAAA,CAAO,KAAK,WAAW,CAAA;AAChC;;;AClRA,eAAsB,iBAAA,CAAkB,OAAA,GAAiC,EAAC,EAAyB;AACjG,EAAA,MAAM,EAAE,MAAA,EAAO,GAAI,MAAM,mBAAmB,OAAO,CAAA;AACnD,EAAA,OAAO,MAAA;AACT;AAEA,eAAsB,kBAAA,CAAmB,OAAA,GAAiC,EAAC,EAAiC;AAC1G,EAAA,MAAM,cAAc,OAAA,CAAQ,WAAA,IAAe,MAAM,eAAA,CAAgB,QAAQ,eAAe,CAAA;AACxF,EAAA,MAAM,MAAA,GAAS,IAAII,eAAAA,CAAY;AAAA,IAC7B,QAAQ,WAAA,CAAY,MAAA;AAAA,IACpB,aAAa,WAAA,CAAY,WAAA;AAAA,IACzB,SAAS,WAAA,CAAY;AAAA,GACtB,CAAA;AACD,EAAA,OAAO,EAAE,QAAQ,WAAA,EAAY;AAC/B;AAEA,eAAsB,oBAAA,CAAqB,OAAA,GAAiC,EAAC,EAAuB;AAClG,EAAA,MAAM,KAAA,GAAQ,MAAM,iBAAA,CAAkB,OAAO,CAAA;AAC7C,EAAA,OAAO,eAAe,KAAK,CAAA;AAC7B;AAYO,SAAS,eAAe,KAAA,EAA+B;AAC5D,EAAA,MAAM,MAAA,GAAS,IAAIC,gBAAA,CAAU;AAAA,IAC3B,IAAA,EAAM,eAAA;AAAA,IACN,OAAA,EAAS;AAAA,GACV,CAAA;AAED,EAAA,MAAM,QAAA,GAAW,mBAAmB,KAAK,CAAA;AACzC,EAAA,MAAM,YAAA,GAAgB,MAAA,CAAe,IAAA,CAAK,IAAA,CAAK,MAAM,CAAA;AACrD,EAAA,KAAA,MAAW,IAAA,IAAQ,MAAA,CAAO,IAAA,CAAK,WAAW,CAAA,EAAyB;AACjE,IAAA,YAAA;AAAA,MACE,IAAA;AAAA,MACA,iBAAiB,IAAI,CAAA;AAAA,MACrB,YAAY,IAAI,CAAA;AAAA,MAChB,OAAO,SACL,KAAA,CAAM,kBAAA;AAAA,QAAmB,EAAE,oBAAoB,IAAA,EAAK;AAAA,QAAG,YACrD,WAAA,CAAY,MAAM,SAAS,IAAI,CAAA,CAAE,IAAI,CAAC;AAAA;AACxC,KACJ;AAAA,EACF;AAEA,EAAA,OAAO,MAAA;AACT;AAEA,eAAsB,cAAA,CAAe,OAAA,GAAiC,EAAC,EAAkB;AACvF,EAAA,MAAM,EAAE,MAAA,EAAQ,KAAA,EAAO,aAAY,GAAI,MAAM,mBAAmB,OAAO,CAAA;AAEvE,EAAA,IAAI,CAAC,QAAQ,WAAA,EAAa;AACxB,IAAA,MAAM,QAAA,GAAW,MAAM,cAAA,CAAe,KAAA,EAAO,aAAa,OAAO,CAAA;AACjE,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAEhB,MAAA,MAAM,MAA6B,IAAI,KAAA;AAAA,QACrC,QAAA,CAAS,MAAA,KAAW,kBAAA,GAChB,6EAAA,GACA;AAAA,OACN;AACA,MAAA,GAAA,CAAI,IAAA,GAAO,sBAAA;AACX,MAAA,MAAM,GAAA;AAAA,IACR;AAAA,EACF;AAEA,EAAA,MAAM,MAAA,GAAS,eAAe,KAAK,CAAA;AACnC,EAAA,MAAM,MAAA,CAAO,OAAA,CAAQ,IAAIC,6BAAA,EAAsB,CAAA;AACjD;AAEA,eAAsB,cAAA,CACpB,KAAA,EACA,WAAA,EACA,OAAA,EAC0B;AAC1B,EAAA,MAAM,YAAY,mBAAA,EAAoB;AACtC,EAAA,MAAM,QAAQ,MAAM,sBAAA;AAAA,IAClB,KAAA;AAAA,IACA;AAAA,MACE,QAAQ,WAAA,CAAY,MAAA;AAAA,MACpB,QAAQ,WAAA,CAAY,MAAA;AAAA,MACpB,SAAS,WAAA,CAAY,OAAA;AAAA,MACrB,aAAa,WAAA,CAAY;AAAA,KAC3B;AAAA,IACA;AAAA,GACF;AAKA,EAAA,MAAM,eAAA,GAAkB,OAAA,CAAQ,eAAA,IAAmB,WAAA,CAAY,UAAA;AAC/D,EAAA,OAAO,cAAc,KAAA,EAAO;AAAA,IAC1B,eAAA;AAAA,IACA,UAAU,OAAA,CAAQ;AAAA,GACnB,CAAA;AACH;AAEA,SAAS,YAAY,OAAA,EAAsB;AACzC,EAAA,OAAO;AAAA,IACL,OAAA,EAAS,CAAC,OAAA,CAAQ,OAAA;AAAA,IAClB,OAAA,EAAS;AAAA,MACP;AAAA,QACE,IAAA,EAAM,MAAA;AAAA,QACN,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,OAAA,EAAS,MAAM,CAAC;AAAA;AACvC;AACF,GACF;AACF","file":"index.cjs","sourcesContent":["import { readFile } from 'node:fs/promises'\n\nexport interface HavenCredentialFile {\n  apiKey: string\n  delegateKey: string\n  agentId?: string\n  safeAddress?: string\n  apiUrl?: string\n  /**\n   * Absolute path the credentials were loaded from, if any. Set when the\n   * caller pointed at a JSON file via `--credentials` or `HAVEN_CREDENTIALS`;\n   * left undefined when credentials came purely from environment variables.\n   * The MCP server uses this to locate the consent sidecar\n   * (`<sourcePath>.ack.json`) so `--ack` works regardless of how the\n   * credential path was supplied.\n   */\n  sourcePath?: string\n}\n\ninterface RawCredentialFile {\n  api_key?: unknown\n  apiKey?: unknown\n  delegate_key?: unknown\n  delegateKey?: unknown\n  agent_id?: unknown\n  agentId?: unknown\n  safe_address?: unknown\n  safeAddress?: unknown\n  api_url?: unknown\n  apiUrl?: unknown\n}\n\n/**\n * Load Haven agent credentials for the MCP server.\n *\n * Resolution order — earlier sources win, later sources are fallbacks:\n *\n *   1. Explicit `path` argument (typically from `--credentials <path>`).\n *   2. `HAVEN_CREDENTIALS` env var pointing at a credential JSON file.\n *   3. Inline env vars: `HAVEN_API_KEY` + `HAVEN_DELEGATE_KEY` (+ optional\n *      `HAVEN_AGENT_ID`, `HAVEN_SAFE_ADDRESS`, `HAVEN_API_URL`).\n *\n * The inline-env path exists so that runtime config snippets emitted by the\n * Haven dashboard (Claude Desktop / Cursor / generic MCP configs) can be a\n * single self-contained block — paste the snippet, restart the runtime, done.\n * The values still live only in the agent operator's process environment;\n * Haven's backend never sees the delegate key either way.\n */\nexport async function loadCredentials(\n  path: string | undefined = process.env.HAVEN_CREDENTIALS,\n): Promise<HavenCredentialFile> {\n  if (path) {\n    return loadCredentialsFromFile(path)\n  }\n\n  const envCreds = loadCredentialsFromEnv()\n  if (envCreds) return envCreds\n\n  throw new Error(\n    'No Haven credentials found. Set HAVEN_CREDENTIALS to a Haven agent credential JSON file, ' +\n    'pass --credentials <path>, or set HAVEN_API_KEY and HAVEN_DELEGATE_KEY environment variables.',\n  )\n}\n\nasync function loadCredentialsFromFile(path: string): Promise<HavenCredentialFile> {\n  let rawText: string\n  try {\n    rawText = await readFile(path, 'utf8')\n  } catch (err) {\n    throw new Error(`Could not read Haven credentials at ${path}: ${err instanceof Error ? err.message : String(err)}`)\n  }\n\n  let raw: RawCredentialFile\n  try {\n    raw = JSON.parse(rawText) as RawCredentialFile\n  } catch {\n    throw new Error('Haven credentials must be JSON with api_key and delegate_key fields.')\n  }\n\n  const apiKey = stringField(raw.api_key ?? raw.apiKey)\n  const delegateKey = stringField(raw.delegate_key ?? raw.delegateKey)\n\n  if (!apiKey) {\n    throw new Error('Haven credentials are missing api_key.')\n  }\n  if (!delegateKey) {\n    throw new Error('Haven MCP requires delegate_key so payments can be signed locally.')\n  }\n\n  return {\n    apiKey,\n    delegateKey,\n    agentId: stringField(raw.agent_id ?? raw.agentId),\n    safeAddress: stringField(raw.safe_address ?? raw.safeAddress),\n    apiUrl: stringField(raw.api_url ?? raw.apiUrl),\n    sourcePath: path,\n  }\n}\n\nfunction loadCredentialsFromEnv(): HavenCredentialFile | null {\n  const apiKey = stringField(process.env.HAVEN_API_KEY)\n  const delegateKey = stringField(process.env.HAVEN_DELEGATE_KEY)\n\n  if (!apiKey && !delegateKey) return null\n\n  if (!apiKey) {\n    throw new Error('HAVEN_DELEGATE_KEY is set but HAVEN_API_KEY is missing.')\n  }\n  if (!delegateKey) {\n    throw new Error('HAVEN_API_KEY is set but HAVEN_DELEGATE_KEY is missing. Haven MCP requires a delegate key so payments can be signed locally.')\n  }\n\n  return {\n    apiKey,\n    delegateKey,\n    agentId: stringField(process.env.HAVEN_AGENT_ID),\n    safeAddress: stringField(process.env.HAVEN_SAFE_ADDRESS),\n    apiUrl: stringField(process.env.HAVEN_API_URL),\n  }\n}\n\nfunction stringField(value: unknown): string | undefined {\n  return typeof value === 'string' && value.trim() ? value.trim() : undefined\n}\n","import {\n  AgentPaymentNextAction,\n  HavenApiError,\n  HavenClient,\n  HavenError,\n  HavenPaymentStateError,\n  HavenSigningError,\n  type MachinePaymentChallenge,\n  type MppQuote,\n  type MppResumeState,\n  type X402Quote,\n  type X402ResumeState,\n} from '@haven_ai/sdk'\nimport { z } from 'zod/v3'\n\nconst headersSchema = z.record(z.string(), z.string()).optional()\n\nexport type HavenMcpToolName =\n  | 'haven_quote_x402'\n  | 'haven_pay_x402_quote'\n  | 'haven_resume_x402_payment'\n  | 'haven_quote_mpp'\n  | 'haven_pay_mpp_challenge'\n  | 'haven_resume_mpp_payment'\n  | 'haven_get_payment_status'\n  | 'haven_get_resume_state'\n  | 'haven_get_agent'\n  | 'haven_get_allowances'\n  | 'haven_list_receipts'\n\nexport const toolSchemas: Record<HavenMcpToolName, z.ZodRawShape> = {\n  haven_quote_x402: {\n    url: z.string().url(),\n    method: z.string().optional(),\n    headers: headersSchema,\n    body: z.string().optional(),\n    idempotencyKey: z.string().optional(),\n  },\n  haven_pay_x402_quote: {\n    quote: z.unknown(),\n    idempotencyKey: z.string().optional(),\n  },\n  haven_resume_x402_payment: {\n    payment_id: z.string().optional(),\n    resume_state: z.unknown().optional(),\n  },\n  haven_quote_mpp: {\n    url: z.string().url().optional(),\n    challenge: z.unknown().optional(),\n    method: z.string().optional(),\n    headers: headersSchema,\n    body: z.string().optional(),\n    idempotencyKey: z.string().optional(),\n  },\n  haven_pay_mpp_challenge: {\n    quote: z.unknown(),\n    idempotencyKey: z.string().optional(),\n  },\n  haven_resume_mpp_payment: {\n    payment_id: z.string().optional(),\n    resume_state: z.unknown().optional(),\n  },\n  haven_get_payment_status: {\n    payment_id: z.string(),\n  },\n  haven_get_resume_state: {\n    payment_id: z.string(),\n  },\n  haven_get_agent: {},\n  haven_get_allowances: {},\n  haven_list_receipts: {\n    limit: z.number().int().min(1).max(100).optional(),\n  },\n}\n\nexport const toolDescriptions: Record<HavenMcpToolName, string> = {\n  haven_quote_x402:\n    'Inspect an HTTP 402 x402 paid resource without creating a Haven payment, signature, approval, or on-chain transaction.',\n  haven_pay_x402_quote:\n    'Pay a previously inspected x402 quote. The delegate key signs locally; Haven only validates and relays signed, on-chain-constrained payment transactions. If approval is needed, preserve the returned resume_state and wait for nextAction=retry_original_x402_request before resuming.',\n  haven_resume_x402_payment:\n    'Resume an x402 payment after the Haven wallet owner approved the funding step. Accepts either resume_state or payment_id. Only use when get status returns nextAction=retry_original_x402_request; do not start a new merchant session.',\n  haven_quote_mpp:\n    'Inspect a Haven MPP challenge or paid MPP URL without creating a Haven payment, signature, approval, or on-chain transaction.',\n  haven_pay_mpp_challenge:\n    'Pay a previously inspected MPP challenge. The delegate key signs locally; Haven only validates and relays signed, on-chain-constrained payment transactions. If approval is needed, preserve resume_state or payment_id.',\n  haven_resume_mpp_payment:\n    'Resume an MPP payment after the Haven wallet owner approved the funding step. Accepts either resume_state or payment_id and retries the original paid resource.',\n  haven_get_payment_status:\n    'Fetch structured Haven payment status, including phase and nextAction taxonomy for agent recovery.',\n  haven_get_resume_state:\n    'Rehydrate stored x402/MPP resume_state by payment_id. This returns context only; signing still happens locally when a resume tool is called.',\n  haven_get_agent:\n    'Return the authenticated agent identity, Haven wallet, delegate address, chain, and status.',\n  haven_get_allowances:\n    'Return configured and on-chain allowance state for the authenticated agent. On-chain allowance is the real spend gate.',\n  haven_list_receipts:\n    'List recent machine-payment receipts/evidence for bookkeeping. Proof header values are not returned.',\n}\n\nexport interface ToolSuccess<T> {\n  success: true\n  data: T\n}\n\nexport interface ToolFailure {\n  success: false\n  code: string\n  message: string\n  statusCode?: number\n  paymentId?: string\n  status?: string\n  phase?: string\n  nextAction?: string\n  resume_state?: unknown\n  body?: unknown\n}\n\nexport type ToolPayload<T = unknown> = ToolSuccess<T> | ToolFailure\n\nexport function createToolHandlers(haven: HavenClient): Record<HavenMcpToolName, (input: unknown) => Promise<ToolPayload>> {\n  return {\n    haven_quote_x402: async (input) => {\n      const args = objectInput('haven_quote_x402', input)\n      return runTool(async () => haven.quoteX402(args.url, requestInit(args), { idempotencyKey: args.idempotencyKey }))\n    },\n\n    haven_pay_x402_quote: async (input) => {\n      const args = objectInput('haven_pay_x402_quote', input)\n      return runTool(async () => {\n        const response = await haven.payX402Quote(args.quote as X402Quote, { idempotencyKey: args.idempotencyKey })\n        return responsePayload(response)\n      })\n    },\n\n    haven_resume_x402_payment: async (input) => {\n      const args = objectInput('haven_resume_x402_payment', input)\n      return runTool(async () => {\n        const state = await resumeState(args, 'x402')\n        const response = await haven.resumeX402Payment(state)\n        return responsePayload(response)\n      })\n    },\n\n    haven_quote_mpp: async (input) => {\n      const args = objectInput('haven_quote_mpp', input)\n      return runTool(async () => {\n        if (args.challenge) {\n          return haven.quoteMpp(args.challenge as MachinePaymentChallenge, requestInit(args), {\n            idempotencyKey: args.idempotencyKey,\n          })\n        }\n        if (!args.url) {\n          throw new HavenApiError('haven_quote_mpp requires either url or challenge.', 400)\n        }\n        return haven.quoteMpp(args.url, requestInit(args), { idempotencyKey: args.idempotencyKey })\n      })\n    },\n\n    haven_pay_mpp_challenge: async (input) => {\n      const args = objectInput('haven_pay_mpp_challenge', input)\n      return runTool(async () => {\n        const response = await haven.payMppChallenge(args.quote as MppQuote, { idempotencyKey: args.idempotencyKey })\n        return responsePayload(response)\n      })\n    },\n\n    haven_resume_mpp_payment: async (input) => {\n      const args = objectInput('haven_resume_mpp_payment', input)\n      return runTool(async () => {\n        const state = await resumeState(args, 'mpp')\n        const response = await haven.resumeMppPayment(state)\n        return responsePayload(response)\n      })\n    },\n\n    haven_get_payment_status: async (input) => {\n      const args = objectInput('haven_get_payment_status', input)\n      return runTool(async () => haven.getPaymentStatus(args.payment_id))\n    },\n\n    haven_get_resume_state: async (input) => {\n      const args = objectInput('haven_get_resume_state', input)\n      return runTool(async () => haven.getResumeState(args.payment_id))\n    },\n\n    haven_get_agent: async () => runTool(async () => haven.getAgent()),\n    haven_get_allowances: async () => runTool(async () => haven.getAllowances()),\n    haven_list_receipts: async (input) => {\n      const args = objectInput('haven_list_receipts', input)\n      return runTool(async () => haven.listReceipts({ limit: args.limit }))\n    },\n  }\n\n  async function resumeState(\n    args: { payment_id?: string; resume_state?: unknown },\n    rail: 'x402' | 'mpp',\n  ): Promise<X402ResumeState | MppResumeState> {\n    const state =\n      args.resume_state ??\n      (args.payment_id ? await haven.getResumeState(args.payment_id) : undefined)\n\n    if (!state || typeof state !== 'object') {\n      throw new HavenApiError(`haven_resume_${rail}_payment requires resume_state or payment_id.`, 400)\n    }\n\n    if ((state as { rail?: unknown }).rail !== rail) {\n      throw new HavenApiError(`Resume state is not for the ${rail} rail.`, 409, state)\n    }\n\n    return state as X402ResumeState | MppResumeState\n  }\n}\n\nfunction objectInput<TName extends HavenMcpToolName>(\n  name: TName,\n  input: unknown,\n): Record<string, any> {\n  return z.object(toolSchemas[name]).parse(input ?? {})\n}\n\nfunction requestInit(input: { method?: string; headers?: Record<string, string>; body?: string }): RequestInit | undefined {\n  if (!input.method && !input.headers && input.body === undefined) return undefined\n  return {\n    method: input.method,\n    headers: input.headers,\n    body: input.body,\n  }\n}\n\nasync function runTool<T>(fn: () => Promise<T>): Promise<ToolPayload<T>> {\n  try {\n    return { success: true, data: await fn() }\n  } catch (err) {\n    return normalizeError(err)\n  }\n}\n\nasync function responsePayload(response: Response): Promise<Record<string, unknown>> {\n  const text = await response.text()\n  return {\n    status: response.status,\n    statusText: response.statusText,\n    headers: Object.fromEntries(response.headers.entries()),\n    body: parseMaybeJson(text),\n  }\n}\n\nfunction parseMaybeJson(text: string): unknown {\n  if (!text) return null\n  try {\n    return JSON.parse(text)\n  } catch {\n    return text\n  }\n}\n\nfunction normalizeError(err: unknown): ToolFailure {\n  if (err instanceof HavenPaymentStateError) {\n    return {\n      success: false,\n      code: err.code,\n      message: err.message,\n      statusCode: err.statusCode,\n      paymentId: err.paymentId,\n      status: err.status,\n      phase: err.phase,\n      nextAction: err.nextAction,\n      resume_state: err.resumeState,\n      body: err.body,\n    }\n  }\n\n  if (err instanceof HavenSigningError) {\n    return {\n      success: false,\n      code: err.code,\n      message: err.message,\n    }\n  }\n\n  if (err instanceof HavenApiError) {\n    const body = err.body as Record<string, unknown> | undefined\n    return {\n      success: false,\n      code: err.code,\n      message: err.message,\n      statusCode: err.statusCode,\n      paymentId: err.paymentId,\n      phase: stringOrUndefined(body?.phase),\n      nextAction:\n        stringOrUndefined(body?.nextAction) ??\n        stringOrUndefined(body?.next_action) ??\n        AgentPaymentNextAction.StopAndTellUser,\n      body: err.body,\n    }\n  }\n\n  if (err instanceof HavenError) {\n    return {\n      success: false,\n      code: err.code,\n      message: err.message,\n      statusCode: err.statusCode,\n      paymentId: err.paymentId,\n    }\n  }\n\n  return {\n    success: false,\n    code: 'UNKNOWN_ERROR',\n    message: err instanceof Error ? err.message : String(err),\n    nextAction: AgentPaymentNextAction.StopAndTellUser,\n  }\n}\n\nfunction stringOrUndefined(value: unknown): string | undefined {\n  return typeof value === 'string' ? value : undefined\n}\n","import { createHash } from 'node:crypto'\nimport { mkdir, readFile, writeFile } from 'node:fs/promises'\nimport { dirname, resolve } from 'node:path'\nimport type { HavenAllowance, HavenAllowanceSummary, HavenClient } from '@haven_ai/sdk'\nimport { toolDescriptions, toolSchemas, type HavenMcpToolName } from './tools.js'\n\n/**\n * First-launch consent gate for the Haven MCP server.\n *\n * Why this exists (option A of issue #163): an agent runtime that loads a\n * Haven credential file is about to expose Haven payment tools to a model.\n * Before the server starts taking JSON-RPC calls we want the operator to\n * acknowledge — exactly once per credential + tool set — what those tools\n * can do and what the on-chain allowance cap actually is. The on-chain\n * AllowanceModule remains the policy primitive; this gate is informational\n * rather than enforcement.\n *\n * Resolution:\n *   - `HAVEN_MCP_ACK=<hash>` env var matching the current consent hash → pass.\n *   - `HAVEN_MCP_ACK=skip` → pass (intended for CI / scripted setups).\n *   - sidecar file `<credentials>.ack.json` containing `{ ack: <hash> }` → pass.\n *   - `--ack` CLI flag → write the sidecar file, print the consent block, pass.\n *   - otherwise → print the consent block to stderr and exit non-zero.\n *\n * The hash binds the api-key prefix to the registered tool set and the\n * agent's current allowance summary, so a configuration change re-triggers\n * the prompt.\n */\n\nexport interface ConsentInput {\n  apiKeyPrefix: string\n  /** Haven API base URL the credential will hit. */\n  apiUrl?: string\n  /** Agent identity from the credential file, when present. */\n  agentId?: string\n  /** Haven wallet (Safe) the agent spends from. */\n  safeAddress?: string\n  /** Agent's delegate EOA — the local signer. */\n  delegateAddress?: string\n  /** Chain the agent operates on. */\n  chainId?: number\n  toolNames: readonly HavenMcpToolName[]\n  allowanceSummary: readonly { token: string; amount: string; resetMinutes: number | null }[]\n}\n\nexport interface ConsentDecision {\n  /** True if the gate is satisfied and the server may start. */\n  ok: boolean\n  /** Hash representing the current consent surface. */\n  hash: string\n  /** Reason the gate accepted (or rejected) the run. */\n  reason:\n    | 'env_var_match'\n    | 'env_var_skip'\n    | 'ack_file_match'\n    | 'wrote_ack_file'\n    | 'env_var_mismatch'\n    | 'no_acknowledgement'\n}\n\nexport interface ConsentOptions {\n  /** Path to the credential file; used to locate the sidecar `<path>.ack.json`. */\n  credentialsPath?: string\n  /** When true, write the sidecar file with the current hash and accept. */\n  writeAck?: boolean\n  /** Override the environment lookup (testing). */\n  env?: Record<string, string | undefined>\n  /** Override the writable stream the consent block is printed to (testing). */\n  out?: { write: (chunk: string) => unknown }\n}\n\nexport function computeConsentHash(input: ConsentInput): string {\n  const allowanceCanonical = [...input.allowanceSummary]\n    .map((a) => `${a.token}:${a.amount}:${a.resetMinutes ?? 'none'}`)\n    .sort()\n    .join('|')\n  const toolCanonical = [...input.toolNames].sort().join(',')\n  // Identity fields are included in the hash so swapping the credential\n  // to a different Haven wallet / delegate / chain — even one with an\n  // identical allowance set — invalidates the prior sidecar and re-prompts\n  // the operator. Addresses are normalised to lowercase so casing changes\n  // in the credential file don't gratuitously re-prompt.\n  const identity = [\n    input.apiKeyPrefix,\n    input.apiUrl ?? '',\n    input.agentId ?? '',\n    (input.safeAddress ?? '').toLowerCase(),\n    (input.delegateAddress ?? '').toLowerCase(),\n    input.chainId ?? '',\n  ].join('|')\n  return createHash('sha256')\n    .update(`${identity}\\n${toolCanonical}\\n${allowanceCanonical}`)\n    .digest('hex')\n    .slice(0, 16)\n}\n\nexport function renderConsentBlock(input: ConsentInput, hash: string): string {\n  const lines: string[] = [\n    '',\n    '────────────────────────────────────────────────────────────',\n    'Haven MCP server — first-launch consent',\n    '────────────────────────────────────────────────────────────',\n    '',\n    `Credential: ${input.apiKeyPrefix}…`,\n  ]\n  if (input.apiUrl) lines.push(`Haven API: ${input.apiUrl}`)\n  if (input.agentId) lines.push(`Agent ID:  ${input.agentId}`)\n  if (input.safeAddress) lines.push(`Haven wallet (Safe): ${input.safeAddress}`)\n  if (input.delegateAddress) lines.push(`Delegate (local signer): ${input.delegateAddress}`)\n  if (typeof input.chainId === 'number') lines.push(`Chain ID:  ${input.chainId}`)\n  lines.push('')\n  lines.push('Confirm these match the Haven wallet and chain you intend the')\n  lines.push('agent runtime to use. The delegate above is the only key that')\n  lines.push('signs payments — it lives in this process, not on Haven\\'s backend.')\n  lines.push('')\n  lines.push('Tools this server will expose to your agent runtime:')\n  for (const name of input.toolNames) {\n    lines.push(`  • ${name}`)\n    lines.push(`      ${toolDescriptions[name]}`)\n  }\n  lines.push('')\n  if (input.allowanceSummary.length === 0) {\n    lines.push('On-chain allowance: none configured.')\n    lines.push('  Any payment will queue for manual approval. The on-chain')\n    lines.push('  Safe AllowanceModule is the real spend gate.')\n  } else {\n    lines.push('On-chain allowance (the real spend gate, Safe AllowanceModule):')\n    for (const a of input.allowanceSummary) {\n      const reset = a.resetMinutes ? ` per ${a.resetMinutes} min` : ' (no reset)'\n      lines.push(`  • up to ${a.amount} ${a.token}${reset}`)\n    }\n  }\n  lines.push('')\n  lines.push('Anything above the on-chain allowance pauses for owner approval')\n  lines.push('in the Haven dashboard. Revoking the agent on-chain disables')\n  lines.push('every MCP tool that would spend.')\n  lines.push('')\n  lines.push(`Consent hash: ${hash}`)\n  lines.push('')\n  lines.push('To acknowledge, EITHER:')\n  lines.push(`  • set HAVEN_MCP_ACK=${hash} in this process\\'s environment, OR`)\n  lines.push('  • re-run with --ack to write the acknowledgement next to your')\n  lines.push('    credential file (sidecar <credentials>.ack.json).')\n  lines.push('')\n  lines.push('────────────────────────────────────────────────────────────')\n  lines.push('')\n  return lines.join('\\n')\n}\n\n/** Resolve the consent gate. Does not exit the process; the caller decides. */\nexport async function ensureConsent(\n  input: ConsentInput,\n  options: ConsentOptions = {},\n): Promise<ConsentDecision> {\n  const env = options.env ?? process.env\n  const out = options.out ?? process.stderr\n  const hash = computeConsentHash(input)\n\n  // 1) Explicit skip — for CI and scripted environments.\n  if (env.HAVEN_MCP_ACK === 'skip') {\n    return { ok: true, hash, reason: 'env_var_skip' }\n  }\n\n  // 2) Env var hash match.\n  if (typeof env.HAVEN_MCP_ACK === 'string' && env.HAVEN_MCP_ACK.length > 0) {\n    if (env.HAVEN_MCP_ACK === hash) {\n      return { ok: true, hash, reason: 'env_var_match' }\n    }\n    out.write(renderConsentBlock(input, hash))\n    out.write(\n      `HAVEN_MCP_ACK was set but did not match the current consent hash.\\n` +\n      `Expected: ${hash}\\n` +\n      `Got:      ${env.HAVEN_MCP_ACK}\\n` +\n      `Re-acknowledge with the new hash above, or run with --ack.\\n\\n`,\n    )\n    return { ok: false, hash, reason: 'env_var_mismatch' }\n  }\n\n  // 3) Sidecar ack file (only meaningful when we loaded from a file).\n  const ackPath = sidecarPath(options.credentialsPath)\n  if (ackPath) {\n    const stored = await readAckFile(ackPath)\n    if (stored?.ack === hash) {\n      return { ok: true, hash, reason: 'ack_file_match' }\n    }\n  }\n\n  // 4) --ack: write the sidecar and accept.\n  if (options.writeAck && ackPath) {\n    out.write(renderConsentBlock(input, hash))\n    await writeAckFile(ackPath, hash)\n    out.write(`Wrote acknowledgement to ${ackPath}\\n\\n`)\n    return { ok: true, hash, reason: 'wrote_ack_file' }\n  }\n\n  // 5) Otherwise: print and refuse.\n  out.write(renderConsentBlock(input, hash))\n  return { ok: false, hash, reason: 'no_acknowledgement' }\n}\n\nfunction sidecarPath(credentialsPath?: string): string | null {\n  if (!credentialsPath) return null\n  return resolve(`${credentialsPath}.ack.json`)\n}\n\nasync function readAckFile(path: string): Promise<{ ack?: string } | null> {\n  try {\n    const raw = await readFile(path, 'utf8')\n    const parsed = JSON.parse(raw) as { ack?: unknown }\n    return { ack: typeof parsed.ack === 'string' ? parsed.ack : undefined }\n  } catch {\n    return null\n  }\n}\n\nasync function writeAckFile(path: string, hash: string): Promise<void> {\n  await mkdir(dirname(path), { recursive: true })\n  await writeFile(\n    path,\n    JSON.stringify({ ack: hash, at: new Date().toISOString() }, null, 2),\n    'utf8',\n  )\n}\n\nexport interface CredentialIdentitySeed {\n  apiKey: string\n  apiUrl?: string\n  agentId?: string\n  /** Safe address from the credential file, used as a fallback. */\n  safeAddress?: string\n}\n\n/**\n * Build the consent input from credential identity plus a live allowance\n * lookup. The on-chain (or configured) allowance is what the operator\n * actually cares about — that's the real spend ceiling — but we also bind\n * the hash to the Haven wallet / delegate / chain so a credential swap\n * cannot quietly reuse a prior sidecar acknowledgement.\n *\n * If `getAllowances()` fails (e.g. backend unreachable on first launch) we\n * fall through to whatever identity fields the credential file provided,\n * so the operator at least sees the tool list and the api-key prefix.\n */\nexport async function consentInputFromClient(\n  haven: HavenClient,\n  seed: CredentialIdentitySeed,\n  toolNames: readonly HavenMcpToolName[],\n): Promise<ConsentInput> {\n  let allowanceSummary: ConsentInput['allowanceSummary'] = []\n  let safeAddress = seed.safeAddress\n  let delegateAddress: string | undefined\n  let chainId: number | undefined\n\n  try {\n    const summary = await haven.getAllowances()\n    const list: HavenAllowance[] = isAllowanceSummary(summary)\n      ? summary.allowances\n      : Array.isArray(summary)\n        ? (summary as HavenAllowance[])\n        : []\n    if (isAllowanceSummary(summary)) {\n      safeAddress = summary.safeAddress ?? safeAddress\n      delegateAddress = summary.delegateAddress\n      chainId = typeof summary.chainId === 'number' ? summary.chainId : chainId\n    }\n    allowanceSummary = list.map((a) => ({\n      token: a.tokenSymbol ?? 'UNKNOWN',\n      amount: a.onchain?.amount ?? a.configuredAmount ?? '0',\n      resetMinutes:\n        typeof a.onchain?.resetTimeMin === 'number'\n          ? a.onchain.resetTimeMin\n          : typeof a.resetPeriodMin === 'number'\n            ? a.resetPeriodMin\n            : null,\n    }))\n  } catch {\n    // Identity falls back to what the credential file gave us.\n  }\n\n  return {\n    apiKeyPrefix: derivePrefix(seed.apiKey),\n    apiUrl: seed.apiUrl,\n    agentId: seed.agentId,\n    safeAddress,\n    delegateAddress,\n    chainId,\n    toolNames,\n    allowanceSummary,\n  }\n}\n\nfunction isAllowanceSummary(value: unknown): value is HavenAllowanceSummary {\n  return (\n    typeof value === 'object' &&\n    value !== null &&\n    'allowances' in value &&\n    Array.isArray((value as { allowances: unknown }).allowances)\n  )\n}\n\n/**\n * Use the leading characters of the api key (which already begins with the\n * non-secret `sk_agent_` prefix) as a stable, low-information identifier.\n * Twelve characters is enough to disambiguate credentials in front of a\n * human but not enough to reveal the secret.\n */\nfunction derivePrefix(apiKey: string): string {\n  return apiKey.slice(0, 12)\n}\n\n/** Convenience: the canonical tool list registered by the server. */\nexport function registeredToolNames(): HavenMcpToolName[] {\n  return Object.keys(toolSchemas) as HavenMcpToolName[]\n}\n","import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js'\nimport { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js'\nimport { HavenClient } from '@haven_ai/sdk'\nimport { loadCredentials, type HavenCredentialFile } from './credentials.js'\nimport {\n  createToolHandlers,\n  toolDescriptions,\n  toolSchemas,\n  type HavenMcpToolName,\n  type ToolPayload,\n} from './tools.js'\nimport {\n  consentInputFromClient,\n  ensureConsent,\n  registeredToolNames,\n  type ConsentDecision,\n} from './consent.js'\n\nexport interface HavenMcpServerOptions {\n  credentialsPath?: string\n  credentials?: HavenCredentialFile\n  /**\n   * When true, write the consent sidecar file (`<credentials>.ack.json`)\n   * with the current consent hash and proceed. Surfaced via the `--ack`\n   * CLI flag.\n   */\n  writeAck?: boolean\n  /**\n   * When true, skip the consent gate entirely. Reserved for tests and\n   * controlled embedding — production CLIs should not set this.\n   */\n  skipConsent?: boolean\n}\n\nexport interface ResolvedHavenClient {\n  client: HavenClient\n  credentials: HavenCredentialFile\n}\n\nexport async function createHavenClient(options: HavenMcpServerOptions = {}): Promise<HavenClient> {\n  const { client } = await resolveHavenClient(options)\n  return client\n}\n\nexport async function resolveHavenClient(options: HavenMcpServerOptions = {}): Promise<ResolvedHavenClient> {\n  const credentials = options.credentials ?? await loadCredentials(options.credentialsPath)\n  const client = new HavenClient({\n    apiKey: credentials.apiKey,\n    delegateKey: credentials.delegateKey,\n    baseUrl: credentials.apiUrl,\n  })\n  return { client, credentials }\n}\n\nexport async function createHavenMcpServer(options: HavenMcpServerOptions = {}): Promise<McpServer> {\n  const haven = await createHavenClient(options)\n  return buildMcpServer(haven)\n}\n\n/**\n * Build an MCP server bound to the supplied Haven client.\n *\n * Each tool dispatch is wrapped in `haven.withRequestContext` so every\n * Haven API request the dispatch issues carries `X-Haven-MCP-Tool: <name>`\n * — and *only* that dispatch's requests see the header. The SDK uses an\n * `AsyncLocalStorage` for the context, so two tool calls running\n * concurrently cannot leak headers into each other and the backend\n * `agent_tool_invocations` rows are always attributed to the right tool.\n */\nexport function buildMcpServer(haven: HavenClient): McpServer {\n  const server = new McpServer({\n    name: '@haven_ai/mcp',\n    version: '0.1.0-alpha',\n  })\n\n  const handlers = createToolHandlers(haven)\n  const registerTool = (server as any).tool.bind(server)\n  for (const name of Object.keys(toolSchemas) as HavenMcpToolName[]) {\n    registerTool(\n      name,\n      toolDescriptions[name],\n      toolSchemas[name],\n      async (args: unknown) =>\n        haven.withRequestContext({ 'X-Haven-MCP-Tool': name }, async () =>\n          toMcpResult(await handlers[name](args)),\n        ),\n    )\n  }\n\n  return server\n}\n\nexport async function runStdioServer(options: HavenMcpServerOptions = {}): Promise<void> {\n  const { client: haven, credentials } = await resolveHavenClient(options)\n\n  if (!options.skipConsent) {\n    const decision = await runConsentGate(haven, credentials, options)\n    if (!decision.ok) {\n      // The consent block has already been printed by `ensureConsent`.\n      const err: NodeJS.ErrnoException = new Error(\n        decision.reason === 'env_var_mismatch'\n          ? 'Haven MCP consent acknowledgement does not match the current configuration.'\n          : 'Haven MCP server requires a one-time consent acknowledgement before starting.',\n      )\n      err.code = 'HAVEN_MCP_NO_CONSENT'\n      throw err\n    }\n  }\n\n  const server = buildMcpServer(haven)\n  await server.connect(new StdioServerTransport())\n}\n\nexport async function runConsentGate(\n  haven: HavenClient,\n  credentials: HavenCredentialFile,\n  options: HavenMcpServerOptions,\n): Promise<ConsentDecision> {\n  const toolNames = registeredToolNames()\n  const input = await consentInputFromClient(\n    haven,\n    {\n      apiKey: credentials.apiKey,\n      apiUrl: credentials.apiUrl,\n      agentId: credentials.agentId,\n      safeAddress: credentials.safeAddress,\n    },\n    toolNames,\n  )\n  // Prefer the path actually used to load credentials (covers\n  // HAVEN_CREDENTIALS as well as --credentials). If neither file path is\n  // available the operator must use HAVEN_MCP_ACK; --ack has nowhere to\n  // write a sidecar in that case.\n  const credentialsPath = options.credentialsPath ?? credentials.sourcePath\n  return ensureConsent(input, {\n    credentialsPath,\n    writeAck: options.writeAck,\n  })\n}\n\nfunction toMcpResult(payload: ToolPayload) {\n  return {\n    isError: !payload.success,\n    content: [\n      {\n        type: 'text' as const,\n        text: JSON.stringify(payload, null, 2),\n      },\n    ],\n  }\n}\n"]}