@haven_ai/mcp 0.6.0-alpha.0 → 0.7.0-alpha.0

package/dist/index.d.cts

@@ -73,17 +73,23 @@ declare const toolSchemas: {
         readonly recipient: z.ZodString;
         readonly amount: z.ZodString;
         readonly idempotency_key: z.ZodOptional<z.ZodString>;
-        /** Legacy spelling, accepted during the #2366 window. Warns; do not use. */
+        /** REMOVED (#3411): declared only so the resolver can refuse it by name, never accepted. */
         readonly idempotencyKey: z.ZodOptional<z.ZodString>;
         /** #3329: spend against an open task budget instead of the agent's period budget. */
         readonly task_budget_id: z.ZodOptional<z.ZodString>;
+        /**
+         * #3330: spend against an open sub-budget this agent HOLDS (it is the
+         * sub-agent B) instead of the agent's own budget. Mutually exclusive
+         * with task_budget_id — the backend refuses a body naming both.
+         */
+        readonly sub_budget_id: z.ZodOptional<z.ZodString>;
     };
     readonly haven_pay_mcp_tool: {
         readonly merchant_url: z.ZodString;
         readonly tool_name: z.ZodString;
         readonly arguments: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
         readonly idempotency_key: z.ZodOptional<z.ZodString>;
-        /** Legacy spelling, accepted during the #2366 window. Warns; do not use. */
+        /** REMOVED (#3411): declared only so the resolver can refuse it by name, never accepted. */
         readonly idempotencyKey: z.ZodOptional<z.ZodString>;
     };
     readonly haven_quote_x402: {
@@ -92,16 +98,18 @@ declare const toolSchemas: {
         readonly headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
         readonly body: z.ZodOptional<z.ZodString>;
         readonly idempotency_key: z.ZodOptional<z.ZodString>;
-        /** Legacy spelling, accepted during the #2366 window. Warns; do not use. */
+        /** REMOVED (#3411): declared only so the resolver can refuse it by name, never accepted. */
         readonly idempotencyKey: z.ZodOptional<z.ZodString>;
     };
     readonly haven_pay_x402_quote: {
         readonly quote: z.ZodUnknown;
         readonly idempotency_key: z.ZodOptional<z.ZodString>;
-        /** Legacy spelling, accepted during the #2366 window. Warns; do not use. */
+        /** REMOVED (#3411): declared only so the resolver can refuse it by name, never accepted. */
         readonly idempotencyKey: z.ZodOptional<z.ZodString>;
         /** #3329: spend against an open task budget instead of the agent's period budget. */
         readonly task_budget_id: z.ZodOptional<z.ZodString>;
+        /** #3330: spend against an open sub-budget this agent holds (it is sub-agent B). Mutually exclusive with task_budget_id. */
+        readonly sub_budget_id: z.ZodOptional<z.ZodString>;
     };
     readonly haven_pay_x402: {
         readonly url: z.ZodString;
@@ -109,10 +117,12 @@ declare const toolSchemas: {
         readonly headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
         readonly body: z.ZodOptional<z.ZodString>;
         readonly idempotency_key: z.ZodOptional<z.ZodString>;
-        /** Legacy spelling, accepted during the #2366 window. Warns; do not use. */
+        /** REMOVED (#3411): declared only so the resolver can refuse it by name, never accepted. */
         readonly idempotencyKey: z.ZodOptional<z.ZodString>;
         /** #3329: spend against an open task budget instead of the agent's period budget. */
         readonly task_budget_id: z.ZodOptional<z.ZodString>;
+        /** #3330: spend against an open sub-budget this agent holds (it is sub-agent B). Mutually exclusive with task_budget_id. */
+        readonly sub_budget_id: z.ZodOptional<z.ZodString>;
     };
     readonly haven_resume_x402_payment: {
         readonly payment_id: z.ZodOptional<z.ZodString>;
@@ -141,6 +151,8 @@ declare const toolSchemas: {
         readonly limit: z.ZodOptional<z.ZodNumber>;
         /** #3128: the previous page's next_cursor (a receipt id). */
         readonly cursor: z.ZodOptional<z.ZodString>;
+        /** #3423: drop each row's payload echoes; the default shape is unchanged. */
+        readonly compact: z.ZodOptional<z.ZodBoolean>;
     };
     readonly haven_verify_receipt: {
         readonly receipt: z.ZodUnknown;
@@ -183,7 +195,9 @@ interface ToolSuccess<T> {
     /**
      * #3303: the backend's `client_update` hint when this package is behind the
      * version the deployment recommends (`required: false`) or below its
-     * minimum (`required: true`). Carries the exact command that updates it.
+     * minimum (`required: true`). `upgrade_command` starts the update: for the
+     * connector-installed packages it is the connector doctor, which prints the
+     * repair line to run next (#3412).
      */
     client_update?: HavenClientUpdate;
 }
@@ -275,6 +289,20 @@ interface ConsentInput {
     /** Chain the agent operates on. */
     chainId?: number;
     toolNames: readonly HavenMcpToolName[];
+    /**
+     * #3410: every amount here is ATOMIC (smallest on-chain units, e.g. 6
+     * decimals for USDC — `1000000` is one USDC, never "1000000 tokens"). Both
+     * producers agree: the live read takes `onchain.amount`, and the seed takes
+     * the credential file's `allowance_amount` — both atomic. `renderConsentBlock`
+     * converts for display through the token registry and falls back to an
+     * explicit `(atomic units)` label when the token is unknown; the consent
+     * hash deliberately covers the atomic string, so a display change alone
+     * never re-prompts the operator.
+     *
+     * Known limitation (#3410, stated not fixed): the seed is setup-time data.
+     * If the wallet owner edits the budget after setup AND the live read then
+     * fails, the screen shows the stale seed budget as if it were current.
+     */
     allowanceSummary: readonly {
         token: string;
         amount: string;
@@ -315,7 +343,12 @@ interface CredentialIdentitySeed {
     delegateAddress?: string;
     /** Chain from the credential file, used as a fallback. */
     chainId?: number;
-    /** Intended agent budget from the setup flow, used before on-chain approval is visible. */
+    /**
+     * Intended agent budget from the setup flow, used before on-chain approval
+     * is visible. #3410: every amount is ATOMIC — the connector writes the
+     * credential file's `allowance_amount` straight from the setup response's
+     * `agent_budget`, and the backend puts `budget_atomic` there.
+     */
     allowanceSummary?: readonly {
         token: string;
         amount: string;
@@ -374,7 +407,7 @@ declare function createHavenMcpServer(options?: HavenMcpServerOptions): Promise<
  * `agent_tool_invocations` rows are always attributed to the right tool.
  */
 declare const MCP_NAME = "@haven_ai/mcp";
-declare const MCP_VERSION = "0.6.0-alpha.0";
+declare const MCP_VERSION = "0.7.0-alpha.0";
 /**
  * Refuse to start on an unsupported Node (#1161).
  *
@@ -387,4 +420,39 @@ declare const MCP_VERSION = "0.6.0-alpha.0";
 declare function assertSupportedNodeVersion(nodeVersion?: string): void;
 declare function runStdioServer(options?: HavenMcpServerOptions): Promise<void>;
 
-export { type ConsentDecision, type ConsentInput, type ConsentOptions, type CredentialIdentitySeed, type HavenCredentialAllowance, type HavenCredentialFile, type HavenCredentialSource, type HavenMcpServerOptions, type HavenMcpToolName, MCP_NAME, MCP_VERSION, type ToolFailure, type ToolPayload, type ToolSuccess, assertSupportedNodeVersion, computeConsentHash, consentInputFromClient, createHavenClient, createHavenMcpServer, createToolHandlers, ensureConsent, loadCredentials, registeredToolNames, renderConsentBlock, resolveHavenClient, runStdioServer, toolDescriptions, toolSchemas };
+/**
+ * The first `@haven_ai/signer` release whose `haven_sign` accepts the
+ * `task_budget_id` argument form (#3329). ONE constant on this surface, with
+ * exactly one job: the value `signer_compatibility.min_signer_version`
+ * reports on the two task-budget handoffs below. The hosted package exports
+ * `TASK_BUDGET_MIN_SIGNER_VERSION` with the same value, tied to the same
+ * release record (`client-releases.data.ts`) by its cross-package pin.
+ */
+declare const TASK_BUDGET_MIN_SIGNER_VERSION = "0.6.0-alpha.0";
+/** The capability key both runtimes report in `signer_compatibility.signer_capability`. */
+declare const SIGNER_CAPABILITY_KEY = "haven/signer-compatibility";
+/**
+ * The recovery notice every result that hands off to
+ * `haven_sign { task_budget_id }` carries — the local twin of the hosted
+ * `taskSignerCompatibilityNotice()`. Field-for-field the same shape:
+ *
+ * - `task_sign_context_version` — from the SDK's single source;
+ * - `min_signer_version` — the constant above;
+ * - `signer_capability` — the existing capability key;
+ * - `check` / `fallback` — the recovery sentence as prose and as data: the
+ *   trigger substring (the generic refusal every pre-0.6.0 signer answers,
+ *   both historic lines begin with it), then close the pending budget, update
+ *   via the connector doctor and its printed repair line, reopen. No relay
+ *   fallback exists for this signing context (an `eip712_delegation` payload
+ *   the 0.5.x unbound allowlist refuses and a 0.4.x signer must not be
+ *   steered into), so none is named.
+ */
+declare function taskSignerCompatibilityNotice(): {
+    task_sign_context_version: number;
+    min_signer_version: string;
+    signer_capability: string;
+    check: string;
+    fallback: string;
+};
+
+export { type ConsentDecision, type ConsentInput, type ConsentOptions, type CredentialIdentitySeed, type HavenCredentialAllowance, type HavenCredentialFile, type HavenCredentialSource, type HavenMcpServerOptions, type HavenMcpToolName, MCP_NAME, MCP_VERSION, SIGNER_CAPABILITY_KEY, TASK_BUDGET_MIN_SIGNER_VERSION, type ToolFailure, type ToolPayload, type ToolSuccess, assertSupportedNodeVersion, computeConsentHash, consentInputFromClient, createHavenClient, createHavenMcpServer, createToolHandlers, ensureConsent, loadCredentials, registeredToolNames, renderConsentBlock, resolveHavenClient, runStdioServer, taskSignerCompatibilityNotice, toolDescriptions, toolSchemas };

package/dist/index.d.ts

@@ -73,17 +73,23 @@ declare const toolSchemas: {
         readonly recipient: z.ZodString;
         readonly amount: z.ZodString;
         readonly idempotency_key: z.ZodOptional<z.ZodString>;
-        /** Legacy spelling, accepted during the #2366 window. Warns; do not use. */
+        /** REMOVED (#3411): declared only so the resolver can refuse it by name, never accepted. */
         readonly idempotencyKey: z.ZodOptional<z.ZodString>;
         /** #3329: spend against an open task budget instead of the agent's period budget. */
         readonly task_budget_id: z.ZodOptional<z.ZodString>;
+        /**
+         * #3330: spend against an open sub-budget this agent HOLDS (it is the
+         * sub-agent B) instead of the agent's own budget. Mutually exclusive
+         * with task_budget_id — the backend refuses a body naming both.
+         */
+        readonly sub_budget_id: z.ZodOptional<z.ZodString>;
     };
     readonly haven_pay_mcp_tool: {
         readonly merchant_url: z.ZodString;
         readonly tool_name: z.ZodString;
         readonly arguments: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
         readonly idempotency_key: z.ZodOptional<z.ZodString>;
-        /** Legacy spelling, accepted during the #2366 window. Warns; do not use. */
+        /** REMOVED (#3411): declared only so the resolver can refuse it by name, never accepted. */
         readonly idempotencyKey: z.ZodOptional<z.ZodString>;
     };
     readonly haven_quote_x402: {
@@ -92,16 +98,18 @@ declare const toolSchemas: {
         readonly headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
         readonly body: z.ZodOptional<z.ZodString>;
         readonly idempotency_key: z.ZodOptional<z.ZodString>;
-        /** Legacy spelling, accepted during the #2366 window. Warns; do not use. */
+        /** REMOVED (#3411): declared only so the resolver can refuse it by name, never accepted. */
         readonly idempotencyKey: z.ZodOptional<z.ZodString>;
     };
     readonly haven_pay_x402_quote: {
         readonly quote: z.ZodUnknown;
         readonly idempotency_key: z.ZodOptional<z.ZodString>;
-        /** Legacy spelling, accepted during the #2366 window. Warns; do not use. */
+        /** REMOVED (#3411): declared only so the resolver can refuse it by name, never accepted. */
         readonly idempotencyKey: z.ZodOptional<z.ZodString>;
         /** #3329: spend against an open task budget instead of the agent's period budget. */
         readonly task_budget_id: z.ZodOptional<z.ZodString>;
+        /** #3330: spend against an open sub-budget this agent holds (it is sub-agent B). Mutually exclusive with task_budget_id. */
+        readonly sub_budget_id: z.ZodOptional<z.ZodString>;
     };
     readonly haven_pay_x402: {
         readonly url: z.ZodString;
@@ -109,10 +117,12 @@ declare const toolSchemas: {
         readonly headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
         readonly body: z.ZodOptional<z.ZodString>;
         readonly idempotency_key: z.ZodOptional<z.ZodString>;
-        /** Legacy spelling, accepted during the #2366 window. Warns; do not use. */
+        /** REMOVED (#3411): declared only so the resolver can refuse it by name, never accepted. */
         readonly idempotencyKey: z.ZodOptional<z.ZodString>;
         /** #3329: spend against an open task budget instead of the agent's period budget. */
         readonly task_budget_id: z.ZodOptional<z.ZodString>;
+        /** #3330: spend against an open sub-budget this agent holds (it is sub-agent B). Mutually exclusive with task_budget_id. */
+        readonly sub_budget_id: z.ZodOptional<z.ZodString>;
     };
     readonly haven_resume_x402_payment: {
         readonly payment_id: z.ZodOptional<z.ZodString>;
@@ -141,6 +151,8 @@ declare const toolSchemas: {
         readonly limit: z.ZodOptional<z.ZodNumber>;
         /** #3128: the previous page's next_cursor (a receipt id). */
         readonly cursor: z.ZodOptional<z.ZodString>;
+        /** #3423: drop each row's payload echoes; the default shape is unchanged. */
+        readonly compact: z.ZodOptional<z.ZodBoolean>;
     };
     readonly haven_verify_receipt: {
         readonly receipt: z.ZodUnknown;
@@ -183,7 +195,9 @@ interface ToolSuccess<T> {
     /**
      * #3303: the backend's `client_update` hint when this package is behind the
      * version the deployment recommends (`required: false`) or below its
-     * minimum (`required: true`). Carries the exact command that updates it.
+     * minimum (`required: true`). `upgrade_command` starts the update: for the
+     * connector-installed packages it is the connector doctor, which prints the
+     * repair line to run next (#3412).
      */
     client_update?: HavenClientUpdate;
 }
@@ -275,6 +289,20 @@ interface ConsentInput {
     /** Chain the agent operates on. */
     chainId?: number;
     toolNames: readonly HavenMcpToolName[];
+    /**
+     * #3410: every amount here is ATOMIC (smallest on-chain units, e.g. 6
+     * decimals for USDC — `1000000` is one USDC, never "1000000 tokens"). Both
+     * producers agree: the live read takes `onchain.amount`, and the seed takes
+     * the credential file's `allowance_amount` — both atomic. `renderConsentBlock`
+     * converts for display through the token registry and falls back to an
+     * explicit `(atomic units)` label when the token is unknown; the consent
+     * hash deliberately covers the atomic string, so a display change alone
+     * never re-prompts the operator.
+     *
+     * Known limitation (#3410, stated not fixed): the seed is setup-time data.
+     * If the wallet owner edits the budget after setup AND the live read then
+     * fails, the screen shows the stale seed budget as if it were current.
+     */
     allowanceSummary: readonly {
         token: string;
         amount: string;
@@ -315,7 +343,12 @@ interface CredentialIdentitySeed {
     delegateAddress?: string;
     /** Chain from the credential file, used as a fallback. */
     chainId?: number;
-    /** Intended agent budget from the setup flow, used before on-chain approval is visible. */
+    /**
+     * Intended agent budget from the setup flow, used before on-chain approval
+     * is visible. #3410: every amount is ATOMIC — the connector writes the
+     * credential file's `allowance_amount` straight from the setup response's
+     * `agent_budget`, and the backend puts `budget_atomic` there.
+     */
     allowanceSummary?: readonly {
         token: string;
         amount: string;
@@ -374,7 +407,7 @@ declare function createHavenMcpServer(options?: HavenMcpServerOptions): Promise<
  * `agent_tool_invocations` rows are always attributed to the right tool.
  */
 declare const MCP_NAME = "@haven_ai/mcp";
-declare const MCP_VERSION = "0.6.0-alpha.0";
+declare const MCP_VERSION = "0.7.0-alpha.0";
 /**
  * Refuse to start on an unsupported Node (#1161).
  *
@@ -387,4 +420,39 @@ declare const MCP_VERSION = "0.6.0-alpha.0";
 declare function assertSupportedNodeVersion(nodeVersion?: string): void;
 declare function runStdioServer(options?: HavenMcpServerOptions): Promise<void>;
 
-export { type ConsentDecision, type ConsentInput, type ConsentOptions, type CredentialIdentitySeed, type HavenCredentialAllowance, type HavenCredentialFile, type HavenCredentialSource, type HavenMcpServerOptions, type HavenMcpToolName, MCP_NAME, MCP_VERSION, type ToolFailure, type ToolPayload, type ToolSuccess, assertSupportedNodeVersion, computeConsentHash, consentInputFromClient, createHavenClient, createHavenMcpServer, createToolHandlers, ensureConsent, loadCredentials, registeredToolNames, renderConsentBlock, resolveHavenClient, runStdioServer, toolDescriptions, toolSchemas };
+/**
+ * The first `@haven_ai/signer` release whose `haven_sign` accepts the
+ * `task_budget_id` argument form (#3329). ONE constant on this surface, with
+ * exactly one job: the value `signer_compatibility.min_signer_version`
+ * reports on the two task-budget handoffs below. The hosted package exports
+ * `TASK_BUDGET_MIN_SIGNER_VERSION` with the same value, tied to the same
+ * release record (`client-releases.data.ts`) by its cross-package pin.
+ */
+declare const TASK_BUDGET_MIN_SIGNER_VERSION = "0.6.0-alpha.0";
+/** The capability key both runtimes report in `signer_compatibility.signer_capability`. */
+declare const SIGNER_CAPABILITY_KEY = "haven/signer-compatibility";
+/**
+ * The recovery notice every result that hands off to
+ * `haven_sign { task_budget_id }` carries — the local twin of the hosted
+ * `taskSignerCompatibilityNotice()`. Field-for-field the same shape:
+ *
+ * - `task_sign_context_version` — from the SDK's single source;
+ * - `min_signer_version` — the constant above;
+ * - `signer_capability` — the existing capability key;
+ * - `check` / `fallback` — the recovery sentence as prose and as data: the
+ *   trigger substring (the generic refusal every pre-0.6.0 signer answers,
+ *   both historic lines begin with it), then close the pending budget, update
+ *   via the connector doctor and its printed repair line, reopen. No relay
+ *   fallback exists for this signing context (an `eip712_delegation` payload
+ *   the 0.5.x unbound allowlist refuses and a 0.4.x signer must not be
+ *   steered into), so none is named.
+ */
+declare function taskSignerCompatibilityNotice(): {
+    task_sign_context_version: number;
+    min_signer_version: string;
+    signer_capability: string;
+    check: string;
+    fallback: string;
+};
+
+export { type ConsentDecision, type ConsentInput, type ConsentOptions, type CredentialIdentitySeed, type HavenCredentialAllowance, type HavenCredentialFile, type HavenCredentialSource, type HavenMcpServerOptions, type HavenMcpToolName, MCP_NAME, MCP_VERSION, SIGNER_CAPABILITY_KEY, TASK_BUDGET_MIN_SIGNER_VERSION, type ToolFailure, type ToolPayload, type ToolSuccess, assertSupportedNodeVersion, computeConsentHash, consentInputFromClient, createHavenClient, createHavenMcpServer, createToolHandlers, ensureConsent, loadCredentials, registeredToolNames, renderConsentBlock, resolveHavenClient, runStdioServer, taskSignerCompatibilityNotice, toolDescriptions, toolSchemas };

package/dist/index.js

@@ -1,6 +1,6 @@
 import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
-import { composeDescription, toolDescriptions as toolDescriptions$1, HavenPaymentStateError, HavenSigningError, HavenApiError, AgentPaymentNextAction, HavenError, HavenClient, havenClientIdentity, isSupportedNodeVersion, unsupportedNodeVersionMessage, verifyPaymentReceipt, discoverMerchantMcpUrl, sameUrl, AgentPaymentFailureCode, resolveTokenFromAddress } from '@haven_ai/sdk';
+import { composeDescription, toolDescriptions as toolDescriptions$1, TASK_SIGN_CONTEXT_VERSION, connectorUpgradeCommand, HavenPaymentStateError, HavenSigningError, HavenApiError, AgentPaymentNextAction, HavenError, resolveTokenBySymbol, formatTokenAmount, HavenClient, havenClientIdentity, isSupportedNodeVersion, unsupportedNodeVersionMessage, verifyPaymentReceipt, discoverMerchantMcpUrl, sameUrl, AgentPaymentFailureCode, resolveTokenFromAddress } from '@haven_ai/sdk';
 import { readFile, stat, mkdir, writeFile } from 'fs/promises';
 import { z } from 'zod/v3';
 import { createHash } from 'crypto';
@@ -236,6 +236,17 @@ async function warnIfCredentialFilePermissive(path, log = (message) => process.s
     );
   }
 }
+var TASK_BUDGET_MIN_SIGNER_VERSION = "0.6.0-alpha.0";
+var SIGNER_CAPABILITY_KEY = "haven/signer-compatibility";
+function taskSignerCompatibilityNotice() {
+  return {
+    task_sign_context_version: TASK_SIGN_CONTEXT_VERSION,
+    min_signer_version: TASK_BUDGET_MIN_SIGNER_VERSION,
+    signer_capability: SIGNER_CAPABILITY_KEY,
+    check: `Call next_tool with next_arguments EXACTLY as given \u2014 the signer fetches the exact bytes by task_budget_id. If haven_sign answers SIGNING_ERROR with a message starting "Pass payment_id (preferred for delegation-rail x402", the signer predates task budgets and signed nothing: first close this budget with haven_close_task_budget { task_budget_id } to release it, then update the connector by running \`${connectorUpgradeCommand()}\` and the repair line it prints, then open the budget again.`,
+    fallback: `haven_sign answered SIGNING_ERROR with a message starting "Pass payment_id (preferred for delegation-rail x402" \u2014 the signer predates task budgets and signed nothing: call haven_close_task_budget { task_budget_id } to release the pending budget, then update the connector by running \`${connectorUpgradeCommand()}\` and the repair line it prints, then open the budget again. There is no relay fallback for this signing context.`
+  };
+}
 var headersSchema = z.record(z.string(), z.string()).optional();
 var toolSchemas = {
   haven_send: {
@@ -243,18 +254,24 @@ var toolSchemas = {
     recipient: z.string().min(1),
     amount: z.string().min(1),
     idempotency_key: z.string().optional(),
-    /** Legacy spelling, accepted during the #2366 window. Warns; do not use. */
-    idempotencyKey: z.string().optional(),
+    /** REMOVED (#3411): declared only so the resolver can refuse it by name, never accepted. */
+    idempotencyKey: z.string().optional().describe("REMOVED (#3411): refused \u2014 send idempotency_key"),
     /** #3329: spend against an open task budget instead of the agent's period budget. */
-    task_budget_id: z.string().min(1).optional()
+    task_budget_id: z.string().min(1).optional(),
+    /**
+     * #3330: spend against an open sub-budget this agent HOLDS (it is the
+     * sub-agent B) instead of the agent's own budget. Mutually exclusive
+     * with task_budget_id — the backend refuses a body naming both.
+     */
+    sub_budget_id: z.string().min(1).optional()
   },
   haven_pay_mcp_tool: {
     merchant_url: z.string().url(),
     tool_name: z.string().min(1),
     arguments: z.record(z.string(), z.unknown()).optional(),
     idempotency_key: z.string().optional(),
-    /** Legacy spelling, accepted during the #2366 window. Warns; do not use. */
-    idempotencyKey: z.string().optional()
+    /** REMOVED (#3411): declared only so the resolver can refuse it by name, never accepted. */
+    idempotencyKey: z.string().optional().describe("REMOVED (#3411): refused \u2014 send idempotency_key")
   },
   haven_quote_x402: {
     url: z.string().url(),
@@ -262,16 +279,18 @@ var toolSchemas = {
     headers: headersSchema,
     body: z.string().optional(),
     idempotency_key: z.string().optional(),
-    /** Legacy spelling, accepted during the #2366 window. Warns; do not use. */
-    idempotencyKey: z.string().optional()
+    /** REMOVED (#3411): declared only so the resolver can refuse it by name, never accepted. */
+    idempotencyKey: z.string().optional().describe("REMOVED (#3411): refused \u2014 send idempotency_key")
   },
   haven_pay_x402_quote: {
     quote: z.unknown(),
     idempotency_key: z.string().optional(),
-    /** Legacy spelling, accepted during the #2366 window. Warns; do not use. */
-    idempotencyKey: z.string().optional(),
+    /** REMOVED (#3411): declared only so the resolver can refuse it by name, never accepted. */
+    idempotencyKey: z.string().optional().describe("REMOVED (#3411): refused \u2014 send idempotency_key"),
     /** #3329: spend against an open task budget instead of the agent's period budget. */
-    task_budget_id: z.string().min(1).optional()
+    task_budget_id: z.string().min(1).optional(),
+    /** #3330: spend against an open sub-budget this agent holds (it is sub-agent B). Mutually exclusive with task_budget_id. */
+    sub_budget_id: z.string().min(1).optional()
   },
   haven_pay_x402: {
     url: z.string().url(),
@@ -279,10 +298,12 @@ var toolSchemas = {
     headers: headersSchema,
     body: z.string().optional(),
     idempotency_key: z.string().optional(),
-    /** Legacy spelling, accepted during the #2366 window. Warns; do not use. */
-    idempotencyKey: z.string().optional(),
+    /** REMOVED (#3411): declared only so the resolver can refuse it by name, never accepted. */
+    idempotencyKey: z.string().optional().describe("REMOVED (#3411): refused \u2014 send idempotency_key"),
     /** #3329: spend against an open task budget instead of the agent's period budget. */
-    task_budget_id: z.string().min(1).optional()
+    task_budget_id: z.string().min(1).optional(),
+    /** #3330: spend against an open sub-budget this agent holds (it is sub-agent B). Mutually exclusive with task_budget_id. */
+    sub_budget_id: z.string().min(1).optional()
   },
   haven_resume_x402_payment: {
     payment_id: z.string().optional(),
@@ -310,7 +331,9 @@ var toolSchemas = {
   haven_list_receipts: {
     limit: z.number().int().min(1).max(100).optional(),
     /** #3128: the previous page's next_cursor (a receipt id). */
-    cursor: z.string().min(1).optional()
+    cursor: z.string().min(1).optional(),
+    /** #3423: drop each row's payload echoes; the default shape is unchanged. */
+    compact: z.boolean().optional().describe("true drops challengePayload, selectedPayment and protocolReceiptPayload from each row; omit for the full row.")
   },
   haven_verify_receipt: {
     receipt: z.unknown()
@@ -399,12 +422,15 @@ function createToolHandlers(haven) {
             token: args.asset,
             amount: args.amount,
             to: args.recipient,
-            // #1207: was accepted by the schema but silently dropped — now
-            // carried to the backend's replay contract.
-            idempotencyKey: args.idempotencyKey,
+            // #1207/#3411: was accepted by the schema but silently dropped — now
+            // carried to the backend's replay contract via the resolved carrier.
+            idempotencyKey: args.resolvedIdempotencyKey,
             // #3329: spend against an open task budget instead of the
             // agent's period budget, when the caller names one.
-            ...typeof args.task_budget_id === "string" ? { taskBudgetId: args.task_budget_id } : {}
+            ...typeof args.task_budget_id === "string" ? { taskBudgetId: args.task_budget_id } : {},
+            // #3330: spend through a sub-budget this agent holds (it is
+            // sub-agent B). Exactly one of the two ids, never both.
+            ...typeof args.sub_budget_id === "string" ? { subBudgetId: args.sub_budget_id } : {}
           });
           return {
             payment_id: result.paymentId,
@@ -442,7 +468,7 @@ function createToolHandlers(haven) {
           body: JSON.stringify(envelope)
         };
         let merchantUrl = args.merchant_url;
-        const idempotencyKey = args.idempotencyKey;
+        const idempotencyKey = args.resolvedIdempotencyKey;
         const attempt = () => haven.fetch(merchantUrl, init, { idempotencyKey });
         let response = await attempt();
         if (!response.ok) {
@@ -476,7 +502,7 @@ function createToolHandlers(haven) {
       if ("success" in pf) return pf;
       const { args, warnings } = pf;
       try {
-        const data = await haven.quoteX402(args.url, requestInit(args), { idempotencyKey: args.idempotencyKey });
+        const data = await haven.quoteX402(args.url, requestInit(args), { idempotencyKey: args.resolvedIdempotencyKey });
         return warnings.length > 0 ? { success: true, data, warnings } : { success: true, data };
       } catch (err) {
         return normalizeError(err);
@@ -503,8 +529,9 @@ function createToolHandlers(haven) {
       }
       return runTool(async () => {
         const response = await haven.payX402Quote(args.quote, {
-          idempotencyKey: args.idempotencyKey,
-          ...typeof args.task_budget_id === "string" ? { taskBudgetId: args.task_budget_id } : {}
+          idempotencyKey: args.resolvedIdempotencyKey,
+          ...typeof args.task_budget_id === "string" ? { taskBudgetId: args.task_budget_id } : {},
+          ...typeof args.sub_budget_id === "string" ? { subBudgetId: args.sub_budget_id } : {}
         });
         return responsePayload(response);
       }, warnings);
@@ -515,8 +542,9 @@ function createToolHandlers(haven) {
       const { args, warnings } = pf;
       return runTool(async () => {
         const response = await haven.fetch(args.url, requestInit(args), {
-          idempotencyKey: args.idempotencyKey,
-          ...typeof args.task_budget_id === "string" ? { taskBudgetId: args.task_budget_id } : {}
+          idempotencyKey: args.resolvedIdempotencyKey,
+          ...typeof args.task_budget_id === "string" ? { taskBudgetId: args.task_budget_id } : {},
+          ...typeof args.sub_budget_id === "string" ? { subBudgetId: args.sub_budget_id } : {}
         });
         return responsePayload(response);
       }, warnings);
@@ -613,7 +641,9 @@ function createToolHandlers(haven) {
     },
     haven_list_receipts: async (input) => {
       const args = objectInput("haven_list_receipts", input);
-      return runTool(async () => haven.listReceiptsPage({ limit: args.limit, cursor: args.cursor }));
+      return runTool(
+        async () => haven.listReceiptsPage({ limit: args.limit, cursor: args.cursor, compact: args.compact === true })
+      );
     },
     haven_verify_receipt: async (input) => {
       const args = objectInput("haven_verify_receipt", input);
@@ -641,7 +671,8 @@ function createToolHandlers(haven) {
           task_budget: result.taskBudget,
           next_action: "sign",
           next_tool: "mcp__haven-signer__haven_sign",
-          next_arguments: { task_budget_id: result.taskBudget.id }
+          next_arguments: { task_budget_id: result.taskBudget.id },
+          signer_compatibility: taskSignerCompatibilityNotice()
         };
       });
     },
@@ -656,7 +687,8 @@ function createToolHandlers(haven) {
           task_budget: result.taskBudget,
           next_action: "sign",
           next_tool: "mcp__haven-signer__haven_sign",
-          next_arguments: { task_budget_id: args.task_budget_id }
+          next_arguments: { task_budget_id: args.task_budget_id },
+          signer_compatibility: taskSignerCompatibilityNotice()
         };
       });
     },
@@ -713,28 +745,20 @@ function preflight(name, input) {
   }
   const idem = resolveIdempotencyKey(args);
   if ("success" in idem) return idem;
-  if (idem.key !== void 0) args = { ...args, idempotencyKey: idem.key };
+  if (idem.key !== void 0) args = { ...args, resolvedIdempotencyKey: idem.key };
   return { args, warnings: idem.warnings };
 }
 function resolveIdempotencyKey(args) {
   const modern = typeof args.idempotency_key === "string" ? args.idempotency_key : void 0;
   const legacy = typeof args.idempotencyKey === "string" ? args.idempotencyKey : void 0;
-  if (modern !== void 0 && legacy !== void 0 && modern !== legacy) {
+  if (legacy !== void 0) {
     return {
       success: false,
-      code: "AMBIGUOUS_IDEMPOTENCY_KEY",
-      message: "Both idempotency_key and idempotencyKey were sent with different values. Nothing was contacted or spent. Send exactly one \u2014 idempotency_key is the current spelling; idempotencyKey is deprecated and will be removed."
+      code: "IDEMPOTENCY_KEY_RENAMED",
+      message: "idempotencyKey has been renamed to idempotency_key and is no longer accepted. Send idempotency_key instead. Nothing was contacted or spent."
     };
   }
   if (modern !== void 0) return { key: modern, warnings: [] };
-  if (legacy !== void 0) {
-    return {
-      key: legacy,
-      warnings: [
-        "idempotencyKey is deprecated and will be removed in a future release of @haven_ai/mcp. Send idempotency_key instead \u2014 it is the spelling the hosted Haven MCP surface and every other Haven wire contract use."
-      ]
-    };
-  }
   return { warnings: [] };
 }
 function buildMcpToolsCallEnvelope(toolName, args) {
@@ -965,7 +989,7 @@ function renderConsentBlock(input, hash) {
     lines.push("signed delegation, not by Haven):");
     for (const a of input.allowanceSummary) {
       const reset = a.resetMinutes ? ` per ${a.resetMinutes} min` : " (no reset)";
-      lines.push(`  \u2022 up to ${a.amount} ${a.token}${reset}`);
+      lines.push(`  \u2022 up to ${describeBudgetAmount(a, input.chainId)}${reset}`);
     }
   }
   lines.push("");
@@ -1062,7 +1086,14 @@ async function consentInputFromClient(haven, seed, toolNames) {
     }
     const liveAllowanceSummary = list.map((a) => ({
       token: a.tokenSymbol ?? "UNKNOWN",
-      amount: a.onchain?.amount ?? a.configuredAmount ?? "0",
+      // #3410: `onchain.amount` is the atomic budget (`budget_atomic` on the
+      // backend). The old `a.configuredAmount` fallback here was unreachable
+      // — `onchain` is required in the SDK types and dereferenced
+      // unconditionally, so a response without it throws into the seed path —
+      // and it was the one HUMAN-decimal value in this chain; a human number
+      // must never reach an atomic field. '0' keeps the (defensive) shape for
+      // a malformed onchain object without inventing a unit.
+      amount: a.onchain?.amount ?? "0",
       resetMinutes: typeof a.onchain?.resetTimeMin === "number" ? a.onchain.resetTimeMin : typeof a.resetPeriodMin === "number" ? a.resetPeriodMin : null
     }));
     allowanceSummary = liveAllowanceSummary;
@@ -1085,6 +1116,11 @@ function isAllowanceSummary(value) {
 function derivePrefix(apiKey) {
   return apiKey.slice(0, 12);
 }
+function describeBudgetAmount(a, chainId) {
+  const token = chainId === void 0 ? null : resolveTokenBySymbol(chainId, a.token);
+  if (!token) return `${a.amount} ${a.token} (atomic units)`;
+  return `${formatTokenAmount(a.amount, token.decimals)} ${a.token}`;
+}
 function registeredToolNames() {
   return Object.keys(toolSchemas);
 }
@@ -1117,7 +1153,7 @@ async function createHavenMcpServer(options = {}) {
   return buildMcpServer(haven);
 }
 var MCP_NAME = "@haven_ai/mcp";
-var MCP_VERSION = "0.6.0-alpha.0";
+var MCP_VERSION = "0.7.0-alpha.0";
 var MCP_INSTRUCTIONS = [
   "Haven local MCP server: signs in-process with the delegate key it holds on",
   "this machine \u2014 the key never leaves this process. Call haven_get_agent",
@@ -1220,6 +1256,6 @@ function toMcpResult(payload) {
   };
 }
 
-export { MCP_NAME, MCP_VERSION, assertSupportedNodeVersion, computeConsentHash, consentInputFromClient, createHavenClient, createHavenMcpServer, createToolHandlers, ensureConsent, loadCredentials, registeredToolNames, renderConsentBlock, resolveHavenClient, runStdioServer, toolDescriptions, toolSchemas };
+export { MCP_NAME, MCP_VERSION, SIGNER_CAPABILITY_KEY, TASK_BUDGET_MIN_SIGNER_VERSION, assertSupportedNodeVersion, computeConsentHash, consentInputFromClient, createHavenClient, createHavenMcpServer, createToolHandlers, ensureConsent, loadCredentials, registeredToolNames, renderConsentBlock, resolveHavenClient, runStdioServer, taskSignerCompatibilityNotice, toolDescriptions, toolSchemas };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map