@haven_ai/mcp 0.1.30-alpha.0 → 0.1.32-alpha.0

package/README.md

@@ -95,6 +95,8 @@ Environment variable form:
 - `haven_get_resume_state`
 - `haven_get_agent`
 - `haven_get_allowances`
+- `haven_discover_tools`
+- `haven_submit_catalog_entry`
 - `haven_list_receipts`
 
 ## First-launch consent
@@ -117,9 +119,16 @@ Tools this server will expose to your agent runtime:
       Return configured and on-chain allowance state …
   …
 
-On-chain allowance (the real spend gate, Safe AllowanceModule):
+On-chain budget (the real spend gate — enforced by the agent's
+signed delegation, not by Haven):
   • up to 50.000000 USDC per 1440 min
 
+Anything above the on-chain budget is declined before any money
+moves — it is not queued, and no one is asked to review it. If the
+agent needs more room, the wallet owner grants or raises the budget
+in Haven. Revoking the agent on-chain disables every MCP tool that
+would spend.
+
 Consent hash: 6f4b…d1a2
 ```
 
@@ -151,14 +160,15 @@ Every MCP tool invocation tags the underlying Haven API call with
 `X-Haven-MCP-Tool: <tool_name>`. The backend records one
 `agent_tool_invocations` row per call (tool name, payment id when present,
 result status, nextAction, error code, HTTP status, timestamp). The agent's
-activity feed in the Haven dashboard surfaces these rows alongside payments
-and approval requests, so the wallet owner can see exactly which tools the
+activity feed in the Haven dashboard surfaces these rows alongside payments,
+so the wallet owner can see exactly which tools the
 agent called and what happened — even for read-only calls that don't move
 money.
 
-The audit log is informational. The on-chain Safe AllowanceModule remains
-the only thing that can stop a spend; revoking the agent on-chain disables
-every MCP tool that would settle, regardless of audit state.
+The audit log is informational. The agent's signed budget delegation — its
+on-chain caveat enforcers — remains the only thing that can stop a spend;
+revoking the agent on-chain disables every MCP tool that would settle,
+regardless of audit state.
 
 ## Manual sanity test
 
@@ -167,9 +177,14 @@ every MCP tool that would settle, regardless of audit state.
    delegate address.
 3. Call `haven_quote_x402` for a paid test URL.
 4. Call `haven_pay_x402_quote` with the returned quote.
-5. If the result has `nextAction: "wait_for_user_approval"`, approve in Haven,
-   then call `haven_resume_x402_payment` with the returned `resume_state` or
-   `payment_id`.
+5. The pay tool performs the merchant retry itself, so a successful call needs
+   no follow-up. If the call is declined for budget, raise the agent budget in
+   Haven and repeat from step 4 — Haven holds no approval queue, so there is
+   nothing to wait for. If the process crashes after payment, a later
+   `haven_get_payment_status` call may report
+   `nextAction: 'retry_original_x402_request'` — only then call
+   `haven_resume_x402_payment` with the preserved resume state or payment id;
+   do not call it speculatively.
 
 The legacy MPP demo flow is retired (#1328) — pay through the x402 merchant
 flow above instead.

package/dist/cli.cjs

@@ -264,7 +264,12 @@ var toolSchemas = {
   haven_discover_tools: {
     category: v3.z.string().optional(),
     search: v3.z.string().optional(),
-    rail: v3.z.enum(["x402", "mpp"]).optional()
+    rail: v3.z.enum(["x402", "mpp"]).optional(),
+    verified: v3.z.enum(["any", "verified", "operator"]).optional()
+  },
+  haven_submit_catalog_entry: {
+    resource_url: v3.z.string().min(1),
+    website: v3.z.string().optional()
   },
   haven_list_receipts: {
     limit: v3.z.number().int().min(1).max(100).optional()
@@ -286,6 +291,7 @@ var toolDescriptions = {
   haven_get_allowances: sdk.composeDescription(sdk.toolDescriptions.getAllowances),
   haven_sweep_delegate: sdk.composeDescription(sdk.toolDescriptions.sweep_delegate),
   haven_discover_tools: sdk.composeDescription(sdk.toolDescriptions.discoverTools),
+  haven_submit_catalog_entry: sdk.composeDescription(sdk.toolDescriptions.submitCatalogEntry),
   haven_list_receipts: sdk.composeDescription(sdk.toolDescriptions.listReceipts),
   haven_verify_receipt: sdk.composeDescription(sdk.toolDescriptions.verifyReceipt)
 };
@@ -316,6 +322,8 @@ function createToolHandlers(haven) {
             return {
               payment_id: err.paymentId,
               status: "pending_approval",
+              next_action: "stop_and_tell_user",
+              message: "This payment is not payable and nothing is queued for anyone to approve \u2014 stop and tell the user, then ask the wallet owner to grant or raise the agent budget in Haven. Do not retry, re-sign, or poll.",
               asset: args.asset,
               amount: args.amount,
               recipient: args.recipient
@@ -422,7 +430,8 @@ function createToolHandlers(haven) {
         const entries = await haven.discoverTools({
           category: typeof args.category === "string" ? args.category : void 0,
           search: typeof args.search === "string" ? args.search : void 0,
-          rail: args.rail === "x402" || args.rail === "mpp" ? args.rail : void 0
+          rail: args.rail === "x402" || args.rail === "mpp" ? args.rail : void 0,
+          verified: args.verified === "verified" || args.verified === "operator" ? args.verified : void 0
         });
         return entries.map((entry) => ({
           id: entry.id,
@@ -440,6 +449,9 @@ function createToolHandlers(haven) {
           network: entry.network,
           status: entry.status,
           verified_at: entry.verifiedAt,
+          source: entry.source,
+          domain_verified: entry.domainVerified,
+          verified_payable: entry.verifiedPayable,
           // Which Haven pay tool reaches this entry from the local MCP surface.
           // #1328: the 'mpp' rail's only-ever catalog row (the Haven MPP demo
           // resource) is delisted with the mpp_demo retirement, so this
@@ -449,6 +461,20 @@ function createToolHandlers(haven) {
         }));
       });
     },
+    haven_submit_catalog_entry: async (input) => {
+      const args = objectInput("haven_submit_catalog_entry", input);
+      return runTool(async () => {
+        const submission = await haven.submitCatalogEntry(
+          String(args.resource_url),
+          typeof args.website === "string" ? { website: args.website } : void 0
+        );
+        return {
+          id: submission.id,
+          verify_token: submission.verifyToken,
+          status: submission.status
+        };
+      });
+    },
     haven_list_receipts: async (input) => {
       const args = objectInput("haven_list_receipts", input);
       return runTool(async () => haven.listReceipts({ limit: args.limit }));
@@ -621,20 +647,23 @@ function renderConsentBlock(input, hash) {
   }
   lines.push("");
   if (input.allowanceSummary.length === 0) {
-    lines.push("On-chain allowance: none configured.");
-    lines.push("  Any payment will queue for manual approval. The on-chain");
-    lines.push("  Safe AllowanceModule is the real spend gate.");
+    lines.push("On-chain budget: none configured.");
+    lines.push("  Until the wallet owner grants this agent a budget in Haven,");
+    lines.push("  every payment it attempts is declined on-chain.");
   } else {
-    lines.push("On-chain allowance (the real spend gate, Safe AllowanceModule):");
+    lines.push("On-chain budget (the real spend gate \u2014 enforced by the agent's");
+    lines.push("signed delegation, not by Haven):");
     for (const a of input.allowanceSummary) {
       const reset = a.resetMinutes ? ` per ${a.resetMinutes} min` : " (no reset)";
       lines.push(`  \u2022 up to ${a.amount} ${a.token}${reset}`);
     }
   }
   lines.push("");
-  lines.push("Anything above the on-chain allowance pauses for owner approval");
-  lines.push("in the Haven dashboard. Revoking the agent on-chain disables");
-  lines.push("every MCP tool that would spend.");
+  lines.push("Anything above the on-chain budget is declined before any money");
+  lines.push("moves \u2014 it is not queued, and no one is asked to review it. If the");
+  lines.push("agent needs more room, the wallet owner grants or raises the budget");
+  lines.push("in Haven. Revoking the agent on-chain disables every MCP tool that");
+  lines.push("would spend.");
   lines.push("");
   lines.push(`Consent hash: ${hash}`);
   lines.push("");
@@ -767,7 +796,7 @@ async function resolveHavenClient(options = {}) {
   return { client, credentials };
 }
 var MCP_NAME = "@haven_ai/mcp";
-var MCP_VERSION = "0.1.30-alpha.0";
+var MCP_VERSION = "0.1.32-alpha.0";
 var MCP_INSTRUCTIONS = [
   "Haven local MCP server: signs in-process with the delegate key it holds on",
   "this machine \u2014 the key never leaves this process. Call haven_get_agent",
@@ -779,8 +808,11 @@ var MCP_INSTRUCTIONS = [
   "paywall. Tool responses carry nextAction \u2014 follow it; description prose",
   "is fallback, not the source of truth.",
   "",
-  "pending_approval means stop and tell the user \u2014 do not retry, re-sign, or",
-  "re-pay while a payment is pending. Spend authority is enforced on-chain by",
+  "A payment outside the agent budget is declined before any money moves. Haven",
+  "holds no approval queue, so there is nothing to poll and no approval will",
+  "ever arrive for it. On a decline, or on any status you do not",
+  "recognise, stop and tell the user: do not retry or re-sign, and ask them to",
+  "grant or raise the budget in Haven. Spend authority is enforced on-chain by",
   "the user's account; Haven never holds keys and cannot override it."
 ].join("\n");
 function buildMcpServer(haven) {