@haven_ai/mcp 0.6.0-alpha.0 → 0.8.0-alpha.0

package/README.md

@@ -119,23 +119,18 @@ Environment variable form:
 - `haven_list_receipts`
 - `haven_open_task_budget` (#3329)
 - `haven_close_task_budget` (#3329)
-- `haven_submit` (#3329 — relays a local signer signature by `task_budget_id`; a `payment_id` is refused on this runtime, which signs and submits payments inline)
+- `haven_submit` (#3329 — relays a local signer signature by `task_budget_id`, or (#3506) by `sub_budget_id` for a sub-budget this agent delegates (listed in `haven_get_agent`'s `pendingSubBudgetSignatures[]`); a `payment_id` is refused on this runtime, which signs and submits payments inline)
 
-### `idempotencyKey` is deprecated — send `idempotency_key`
+### `idempotencyKey` is removed — send `idempotency_key`
 
 The tools that take an idempotency key (`haven_send`, `haven_pay_mcp_tool`,
-`haven_quote_x402`, `haven_pay_x402_quote`, `haven_pay_x402`) now accept
-**`idempotency_key`**, the spelling the hosted Haven MCP surface and every other
-Haven wire contract use. `idempotencyKey` still works and returns a deprecation
-warning; it will be removed in a future release.
+`haven_quote_x402`, `haven_pay_x402_quote`, `haven_pay_x402`) take
+**`idempotency_key`**, the spelling the hosted Haven MCP surface uses.
 
-Send **one** of them. Sending both with different values is refused
-(`AMBIGUOUS_IDEMPOTENCY_KEY`) with nothing contacted or spent — the key decides
-whether a retry is the same payment or a second one, so Haven will not guess
-which scope you meant. Sending both with the same value is fine.
-
-The warning arrives in an optional `warnings` array on the success result. It is
-additive: a caller that ignores it sees the response it always saw.
+The legacy `idempotencyKey` spelling is **refused**, not silently accepted or
+dropped: any call that sets it — alone or alongside `idempotency_key` — fails
+with `IDEMPOTENCY_KEY_RENAMED` before anything is contacted or spent. Send
+`idempotency_key` instead.
 
 ## First-launch consent
 
@@ -159,7 +154,7 @@ Tools this server will expose to your agent runtime:
 
 On-chain budget (the real spend gate — enforced by the agent's
 signed delegation, not by Haven):
-  • up to 50.000000 USDC per 1440 min
+  • up to 25 USDC per 1440 min
 
 Anything above the on-chain budget is declined before any money
 moves — it is not queued, and no one is asked to review it. If the
@@ -195,13 +190,17 @@ live.
 ## Audit log
 
 Every MCP tool invocation tags the underlying Haven API call with
-`X-Haven-MCP-Tool: <tool_name>`. The backend records one
-`agent_tool_invocations` row per call (tool name, payment id when present,
-result status, nextAction, error code, HTTP status, timestamp). The agent's
+`X-Haven-MCP-Tool: <tool_name>`. The backend records an
+`agent_tool_invocations` row (tool name, payment id when present, result
+status, nextAction, error code, HTTP status, timestamp) for the tools on its
+allowlist (`MCP_TOOL_NAMES` in the backend's `agentToolAudit.ts`):
+`haven_quote_x402`, `haven_pay_x402_quote`, `haven_resume_x402_payment`,
+`haven_get_payment_status`, `haven_get_resume_state`, `haven_get_agent`,
+`haven_get_allowances` and `haven_list_receipts`. Every other tool, including
+`haven_send`, `haven_pay_x402` and `haven_submit`, leaves no row. The agent's
 activity feed in the Haven dashboard surfaces these rows alongside payments,
-so the wallet owner can see exactly which tools the
-agent called and what happened — even for read-only calls that don't move
-money.
+so the wallet owner can see which of those tools the agent called and what
+happened — including the read-only calls that don't move money.
 
 The audit log is informational. The agent's signed budget delegation — its
 on-chain caveat enforcers — remains the only thing that can stop a spend;

package/dist/cli.cjs

@@ -238,6 +238,17 @@ async function warnIfCredentialFilePermissive(path, log = (message) => process.s
     );
   }
 }
+var TASK_BUDGET_MIN_SIGNER_VERSION = "0.6.0-alpha.0";
+var SIGNER_CAPABILITY_KEY = "haven/signer-compatibility";
+function taskSignerCompatibilityNotice() {
+  return {
+    task_sign_context_version: sdk.TASK_SIGN_CONTEXT_VERSION,
+    min_signer_version: TASK_BUDGET_MIN_SIGNER_VERSION,
+    signer_capability: SIGNER_CAPABILITY_KEY,
+    check: `Call next_tool with next_arguments EXACTLY as given \u2014 the signer fetches the exact bytes by task_budget_id. If haven_sign answers SIGNING_ERROR with a message starting "Pass payment_id (preferred for delegation-rail x402", the signer predates task budgets and signed nothing: first close this budget with haven_close_task_budget { task_budget_id } to release it, then update the connector by running \`${sdk.connectorUpgradeCommand()}\` and the repair line it prints, then open the budget again.`,
+    fallback: `haven_sign answered SIGNING_ERROR with a message starting "Pass payment_id (preferred for delegation-rail x402" \u2014 the signer predates task budgets and signed nothing: call haven_close_task_budget { task_budget_id } to release the pending budget, then update the connector by running \`${sdk.connectorUpgradeCommand()}\` and the repair line it prints, then open the budget again. There is no relay fallback for this signing context.`
+  };
+}
 var headersSchema = v3.z.record(v3.z.string(), v3.z.string()).optional();
 var toolSchemas = {
   haven_send: {
@@ -245,18 +256,24 @@ var toolSchemas = {
     recipient: v3.z.string().min(1),
     amount: v3.z.string().min(1),
     idempotency_key: v3.z.string().optional(),
-    /** Legacy spelling, accepted during the #2366 window. Warns; do not use. */
-    idempotencyKey: v3.z.string().optional(),
+    /** REMOVED (#3411): declared only so the resolver can refuse it by name, never accepted. */
+    idempotencyKey: v3.z.string().optional().describe("REMOVED (#3411): refused \u2014 send idempotency_key"),
     /** #3329: spend against an open task budget instead of the agent's period budget. */
-    task_budget_id: v3.z.string().min(1).optional()
+    task_budget_id: v3.z.string().min(1).optional(),
+    /**
+     * #3330: spend against an open sub-budget this agent HOLDS (it is the
+     * sub-agent B) instead of the agent's own budget. Mutually exclusive
+     * with task_budget_id — the backend refuses a body naming both.
+     */
+    sub_budget_id: v3.z.string().min(1).optional()
   },
   haven_pay_mcp_tool: {
     merchant_url: v3.z.string().url(),
     tool_name: v3.z.string().min(1),
     arguments: v3.z.record(v3.z.string(), v3.z.unknown()).optional(),
     idempotency_key: v3.z.string().optional(),
-    /** Legacy spelling, accepted during the #2366 window. Warns; do not use. */
-    idempotencyKey: v3.z.string().optional()
+    /** REMOVED (#3411): declared only so the resolver can refuse it by name, never accepted. */
+    idempotencyKey: v3.z.string().optional().describe("REMOVED (#3411): refused \u2014 send idempotency_key")
   },
   haven_quote_x402: {
     url: v3.z.string().url(),
@@ -264,16 +281,18 @@ var toolSchemas = {
     headers: headersSchema,
     body: v3.z.string().optional(),
     idempotency_key: v3.z.string().optional(),
-    /** Legacy spelling, accepted during the #2366 window. Warns; do not use. */
-    idempotencyKey: v3.z.string().optional()
+    /** REMOVED (#3411): declared only so the resolver can refuse it by name, never accepted. */
+    idempotencyKey: v3.z.string().optional().describe("REMOVED (#3411): refused \u2014 send idempotency_key")
   },
   haven_pay_x402_quote: {
     quote: v3.z.unknown(),
     idempotency_key: v3.z.string().optional(),
-    /** Legacy spelling, accepted during the #2366 window. Warns; do not use. */
-    idempotencyKey: v3.z.string().optional(),
+    /** REMOVED (#3411): declared only so the resolver can refuse it by name, never accepted. */
+    idempotencyKey: v3.z.string().optional().describe("REMOVED (#3411): refused \u2014 send idempotency_key"),
     /** #3329: spend against an open task budget instead of the agent's period budget. */
-    task_budget_id: v3.z.string().min(1).optional()
+    task_budget_id: v3.z.string().min(1).optional(),
+    /** #3330: spend against an open sub-budget this agent holds (it is sub-agent B). Mutually exclusive with task_budget_id. */
+    sub_budget_id: v3.z.string().min(1).optional()
   },
   haven_pay_x402: {
     url: v3.z.string().url(),
@@ -281,10 +300,12 @@ var toolSchemas = {
     headers: headersSchema,
     body: v3.z.string().optional(),
     idempotency_key: v3.z.string().optional(),
-    /** Legacy spelling, accepted during the #2366 window. Warns; do not use. */
-    idempotencyKey: v3.z.string().optional(),
+    /** REMOVED (#3411): declared only so the resolver can refuse it by name, never accepted. */
+    idempotencyKey: v3.z.string().optional().describe("REMOVED (#3411): refused \u2014 send idempotency_key"),
     /** #3329: spend against an open task budget instead of the agent's period budget. */
-    task_budget_id: v3.z.string().min(1).optional()
+    task_budget_id: v3.z.string().min(1).optional(),
+    /** #3330: spend against an open sub-budget this agent holds (it is sub-agent B). Mutually exclusive with task_budget_id. */
+    sub_budget_id: v3.z.string().min(1).optional()
   },
   haven_resume_x402_payment: {
     payment_id: v3.z.string().optional(),
@@ -312,7 +333,9 @@ var toolSchemas = {
   haven_list_receipts: {
     limit: v3.z.number().int().min(1).max(100).optional(),
     /** #3128: the previous page's next_cursor (a receipt id). */
-    cursor: v3.z.string().min(1).optional()
+    cursor: v3.z.string().min(1).optional(),
+    /** #3423: drop each row's payload echoes; the default shape is unchanged. */
+    compact: v3.z.boolean().optional().describe("true drops challengePayload, selectedPayment and protocolReceiptPayload from each row; omit for the full row.")
   },
   haven_verify_receipt: {
     receipt: v3.z.unknown()
@@ -330,12 +353,19 @@ var toolSchemas = {
   haven_close_task_budget: {
     task_budget_id: v3.z.string().min(1)
   },
-  // #3329: relays a signature from the local signer — either the open/close
-  // signature for a task budget, or (schema parity with the hosted surface)
-  // a direct-payment signature by payment_id. Exactly one of task_budget_id /
-  // payment_id, never both or neither.
+  // #3518: read ONE task budget by id, any status — the status check a close
+  // refusal's "re-check the budget's status" points at, on the local surface
+  // too (schema and wording parity with the hosted read).
+  haven_get_task_budget: {
+    task_budget_id: v3.z.string().min(1)
+  },
+  // #3329 / #3506: relays a signature from the local signer — the open/close
+  // signature for a task budget or a sub-budget row, or (schema parity with
+  // the hosted surface) a direct-payment signature by payment_id. Exactly one
+  // of task_budget_id / sub_budget_id / payment_id, never two or none.
   haven_submit: {
     task_budget_id: v3.z.string().min(1).optional(),
+    sub_budget_id: v3.z.string().min(1).optional(),
     payment_id: v3.z.string().min(1).optional(),
     signature: v3.z.string().regex(/^0x[0-9a-fA-F]+$/, "signature must be a 0x-prefixed hex string")
   }
@@ -363,11 +393,19 @@ var CLOSE_TASK_BUDGET_DESCRIPTION = [
   "the signature with haven_submit. A task budget past its own deadline closes immediately, the",
   "same as the pending case."
 ].join(" ");
+var GET_TASK_BUDGET_DESCRIPTION = [
+  "Read one task budget by id, any status.",
+  "Returns { task_budget } with status (pending | open | closing | closed), isExpired, maxDisplay, recipientAddress, label and expiresAt \u2014",
+  "the check to run after a close or submit refusal says to re-check the budget's status.",
+  "haven_get_agent lists live task budgets only; this reads any one, closed or expired included."
+].join(" ");
 var SUBMIT_DESCRIPTION = [
   "Relay a signature from the local signer. Pass exactly one of task_budget_id (from",
-  "haven_open_task_budget or haven_close_task_budget) or payment_id \u2014 never both, never neither \u2014",
-  "plus signature. For a task budget this opens or closes it on-chain and returns { task_budget,",
-  'status }; a close in progress may return { task_budget, status: "closed", close_tx_hash }.'
+  "haven_open_task_budget or haven_close_task_budget), sub_budget_id (from haven_get_agent",
+  "pendingSubBudgetSignatures[]) or payment_id \u2014 never two, never none \u2014 plus signature.",
+  "For a task budget this opens or closes it on-chain and returns { task_budget,",
+  'status }; a close in progress may return { task_budget, status: "closed", close_tx_hash }.',
+  "A sub_budget_id returns { sub_budget, status } with the next signer step, if one is owed."
 ].join(" ");
 var toolDescriptions = {
   haven_send: sdk.composeDescription(sdk.toolDescriptions.send),
@@ -387,8 +425,101 @@ var toolDescriptions = {
   haven_verify_receipt: sdk.composeDescription(sdk.toolDescriptions.verifyReceipt),
   haven_open_task_budget: OPEN_TASK_BUDGET_DESCRIPTION,
   haven_close_task_budget: CLOSE_TASK_BUDGET_DESCRIPTION,
+  haven_get_task_budget: GET_TASK_BUDGET_DESCRIPTION,
   haven_submit: SUBMIT_DESCRIPTION
 };
+function subBudgetSignStep(subBudgetId) {
+  return {
+    next_action: "sign",
+    next_tool: "mcp__haven-signer__haven_sign",
+    next_arguments: { sub_budget_id: subBudgetId }
+  };
+}
+async function submitSubBudgetTool(haven, subBudgetId, signature) {
+  let result;
+  try {
+    result = await haven.submitSubBudget(subBudgetId, signature);
+  } catch (err) {
+    const code = err instanceof sdk.HavenApiError ? err.body?.error_code : void 0;
+    if (code === "close_needs_reprepare") {
+      let fresh;
+      try {
+        fresh = await haven.closeSubBudget(subBudgetId);
+      } catch (closeErr) {
+        return normalizeError(closeErr);
+      }
+      if (fresh.status === "closed") {
+        return {
+          success: true,
+          data: {
+            sub_budget: fresh.subBudget,
+            status: "closed",
+            next_action: "none",
+            next_tool_omitted_reason: "the sub-budget is closed on-chain; nothing further to sign or submit for it"
+          }
+        };
+      }
+      return {
+        success: false,
+        code: "CLOSE_NEEDS_REPREPARE",
+        message: "The stored close operation for this sub-budget was stale, so nothing was relayed. Haven prepared a fresh one: sign it with haven_sign, then call haven_submit again with the new signature.",
+        statusCode: 409,
+        ...subBudgetSignStep(subBudgetId)
+      };
+    }
+    if (code === "close_outcome_unconfirmed") {
+      return {
+        success: false,
+        code: "CLOSE_OUTCOME_UNCONFIRMED",
+        message: "The close operation was sent but its outcome is not confirmed yet (on Base that can take tens of minutes). Wait, then call haven_submit again with the same arguments: it reports closed once the chain has finalised the disable, or prepares a fresh operation to sign if the earlier one did not land.",
+        statusCode: 502,
+        next_action: "check_status_later",
+        next_tool: "haven_submit",
+        next_arguments: { sub_budget_id: subBudgetId, signature }
+      };
+    }
+    return normalizeError(err);
+  }
+  return runTool(async () => {
+    const submitted = {
+      sub_budget: result.subBudget,
+      status: result.status,
+      ...result.closeTxHash !== void 0 ? { close_tx_hash: result.closeTxHash } : {}
+    };
+    if (result.status === "closed") {
+      return {
+        ...submitted,
+        next_action: "none",
+        next_tool_omitted_reason: "the sub-budget is closed on-chain; nothing further to sign or submit for it"
+      };
+    }
+    let pending;
+    try {
+      pending = await haven.listPendingSubBudgetSignatures();
+    } catch {
+      pending = null;
+    }
+    if (pending === null) {
+      return {
+        ...submitted,
+        next_action: "check_status_later",
+        next_tool: "haven_get_agent",
+        next_arguments: {},
+        reason: "This sub-budget row is open, but Haven could not say whether its tree has another row awaiting your signature. Call haven_get_agent and sign any pendingSubBudgetSignatures row."
+      };
+    }
+    const tree = result.subBudget.parentSubBudgetId ?? result.subBudget.id;
+    const sibling = pending.find(
+      (row) => row.purpose === "open" && row.subBudgetId !== result.subBudget.id && (row.parentSubBudgetId ?? row.subBudgetId) === tree
+    );
+    if (sibling) return { ...submitted, ...subBudgetSignStep(sibling.subBudgetId) };
+    return {
+      ...submitted,
+      next_action: "none",
+      next_tool_omitted_reason: "no other row of this sub-budget awaits your signature, so the sub-budget is fully open and the sub-agent can spend through its grant"
+    };
+  });
+}
 function createToolHandlers(haven) {
   return {
     haven_send: async (input) => {
@@ -401,12 +532,15 @@ function createToolHandlers(haven) {
             token: args.asset,
             amount: args.amount,
             to: args.recipient,
-            // #1207: was accepted by the schema but silently dropped — now
-            // carried to the backend's replay contract.
-            idempotencyKey: args.idempotencyKey,
+            // #1207/#3411: was accepted by the schema but silently dropped — now
+            // carried to the backend's replay contract via the resolved carrier.
+            idempotencyKey: args.resolvedIdempotencyKey,
             // #3329: spend against an open task budget instead of the
             // agent's period budget, when the caller names one.
-            ...typeof args.task_budget_id === "string" ? { taskBudgetId: args.task_budget_id } : {}
+            ...typeof args.task_budget_id === "string" ? { taskBudgetId: args.task_budget_id } : {},
+            // #3330: spend through a sub-budget this agent holds (it is
+            // sub-agent B). Exactly one of the two ids, never both.
+            ...typeof args.sub_budget_id === "string" ? { subBudgetId: args.sub_budget_id } : {}
           });
           return {
             payment_id: result.paymentId,
@@ -444,7 +578,7 @@ function createToolHandlers(haven) {
           body: JSON.stringify(envelope)
         };
         let merchantUrl = args.merchant_url;
-        const idempotencyKey = args.idempotencyKey;
+        const idempotencyKey = args.resolvedIdempotencyKey;
         const attempt = () => haven.fetch(merchantUrl, init, { idempotencyKey });
         let response = await attempt();
         if (!response.ok) {
@@ -478,7 +612,7 @@ function createToolHandlers(haven) {
       if ("success" in pf) return pf;
       const { args, warnings } = pf;
       try {
-        const data = await haven.quoteX402(args.url, requestInit(args), { idempotencyKey: args.idempotencyKey });
+        const data = await haven.quoteX402(args.url, requestInit(args), { idempotencyKey: args.resolvedIdempotencyKey });
         return warnings.length > 0 ? { success: true, data, warnings } : { success: true, data };
       } catch (err) {
         return normalizeError(err);
@@ -505,8 +639,9 @@ function createToolHandlers(haven) {
       }
       return runTool(async () => {
         const response = await haven.payX402Quote(args.quote, {
-          idempotencyKey: args.idempotencyKey,
-          ...typeof args.task_budget_id === "string" ? { taskBudgetId: args.task_budget_id } : {}
+          idempotencyKey: args.resolvedIdempotencyKey,
+          ...typeof args.task_budget_id === "string" ? { taskBudgetId: args.task_budget_id } : {},
+          ...typeof args.sub_budget_id === "string" ? { subBudgetId: args.sub_budget_id } : {}
         });
         return responsePayload(response);
       }, warnings);
@@ -517,8 +652,9 @@ function createToolHandlers(haven) {
       const { args, warnings } = pf;
       return runTool(async () => {
         const response = await haven.fetch(args.url, requestInit(args), {
-          idempotencyKey: args.idempotencyKey,
-          ...typeof args.task_budget_id === "string" ? { taskBudgetId: args.task_budget_id } : {}
+          idempotencyKey: args.resolvedIdempotencyKey,
+          ...typeof args.task_budget_id === "string" ? { taskBudgetId: args.task_budget_id } : {},
+          ...typeof args.sub_budget_id === "string" ? { subBudgetId: args.sub_budget_id } : {}
         });
         return responsePayload(response);
       }, warnings);
@@ -539,7 +675,17 @@ function createToolHandlers(haven) {
       const args = objectInput("haven_get_resume_state", input);
       return runTool(async () => haven.getResumeState(args.payment_id));
     },
-    haven_get_agent: async () => runTool(async () => haven.getAgentSummary()),
+    haven_get_agent: async () => runTool(async () => {
+      const summary = await haven.getAgentSummary();
+      if (!Array.isArray(summary.pendingSubBudgetSignatures)) return summary;
+      return {
+        ...summary,
+        pendingSubBudgetSignatures: summary.pendingSubBudgetSignatures.map((row) => ({
+          ...row,
+          ...subBudgetSignStep(row.subBudgetId)
+        }))
+      };
+    }),
     haven_get_allowances: async () => runTool(async () => haven.getAllowances()),
     haven_sweep_delegate: async () => runTool(async () => haven.sweepDelegate()),
     haven_discover_tools: async (input) => {
@@ -615,7 +761,9 @@ function createToolHandlers(haven) {
     },
     haven_list_receipts: async (input) => {
       const args = objectInput("haven_list_receipts", input);
-      return runTool(async () => haven.listReceiptsPage({ limit: args.limit, cursor: args.cursor }));
+      return runTool(
+        async () => haven.listReceiptsPage({ limit: args.limit, cursor: args.cursor, compact: args.compact === true })
+      );
     },
     haven_verify_receipt: async (input) => {
       const args = objectInput("haven_verify_receipt", input);
@@ -643,7 +791,8 @@ function createToolHandlers(haven) {
           task_budget: result.taskBudget,
           next_action: "sign",
           next_tool: "mcp__haven-signer__haven_sign",
-          next_arguments: { task_budget_id: result.taskBudget.id }
+          next_arguments: { task_budget_id: result.taskBudget.id },
+          signer_compatibility: taskSignerCompatibilityNotice()
         };
       });
     },
@@ -658,21 +807,37 @@ function createToolHandlers(haven) {
           task_budget: result.taskBudget,
           next_action: "sign",
           next_tool: "mcp__haven-signer__haven_sign",
-          next_arguments: { task_budget_id: args.task_budget_id }
+          next_arguments: { task_budget_id: args.task_budget_id },
+          signer_compatibility: taskSignerCompatibilityNotice()
         };
       });
     },
+    // #3518: read ONE task budget by id, any status — the status check a
+    // close/submit refusal's "re-check the budget's status" points at. The
+    // SDK relays `GET /task-budgets/:id` (the backend route answers any
+    // status) and a 404 carries the backend's own message through runTool.
+    haven_get_task_budget: async (input) => {
+      const args = objectInput("haven_get_task_budget", input);
+      return runTool(async () => {
+        const taskBudget = await haven.getTaskBudget(args.task_budget_id);
+        return { task_budget: taskBudget };
+      });
+    },
     haven_submit: async (input) => {
       const args = objectInput("haven_submit", input);
       const hasTaskBudget = typeof args.task_budget_id === "string" && args.task_budget_id.length > 0;
+      const hasSubBudget = typeof args.sub_budget_id === "string" && args.sub_budget_id.length > 0;
       const hasPayment = typeof args.payment_id === "string" && args.payment_id.length > 0;
-      if (hasTaskBudget === hasPayment) {
+      if ([hasTaskBudget, hasSubBudget, hasPayment].filter(Boolean).length !== 1) {
         return {
           success: false,
           code: "INVALID_INPUT",
-          message: "haven_submit takes exactly one of task_budget_id or payment_id, never both or neither. Nothing was relayed."
+          message: "haven_submit takes exactly one of payment_id, task_budget_id or sub_budget_id, never two or none. Nothing was relayed."
         };
       }
+      if (hasSubBudget) {
+        return submitSubBudgetTool(haven, args.sub_budget_id, args.signature);
+      }
       return runTool(async () => {
         if (hasTaskBudget) {
           const result = await haven.submitTaskBudget(args.task_budget_id, args.signature);
@@ -683,7 +848,7 @@ function createToolHandlers(haven) {
           };
         }
         throw new sdk.HavenApiError(
-          "haven_submit with payment_id is not supported on the local MCP surface: haven_send signs and submits a direct payment in one call, so there is no separate relay step. Use haven_submit with task_budget_id to relay a task-budget open/close signature.",
+          "haven_submit with payment_id is not supported on the local MCP surface: haven_send signs and submits a direct payment in one call, so there is no separate relay step. Use haven_submit with task_budget_id or sub_budget_id to relay a budget open/close signature.",
           400
         );
       });
@@ -715,28 +880,20 @@ function preflight(name, input) {
   }
   const idem = resolveIdempotencyKey(args);
   if ("success" in idem) return idem;
-  if (idem.key !== void 0) args = { ...args, idempotencyKey: idem.key };
+  if (idem.key !== void 0) args = { ...args, resolvedIdempotencyKey: idem.key };
   return { args, warnings: idem.warnings };
 }
 function resolveIdempotencyKey(args) {
   const modern = typeof args.idempotency_key === "string" ? args.idempotency_key : void 0;
   const legacy = typeof args.idempotencyKey === "string" ? args.idempotencyKey : void 0;
-  if (modern !== void 0 && legacy !== void 0 && modern !== legacy) {
+  if (legacy !== void 0) {
     return {
       success: false,
-      code: "AMBIGUOUS_IDEMPOTENCY_KEY",
-      message: "Both idempotency_key and idempotencyKey were sent with different values. Nothing was contacted or spent. Send exactly one \u2014 idempotency_key is the current spelling; idempotencyKey is deprecated and will be removed."
+      code: "IDEMPOTENCY_KEY_RENAMED",
+      message: "idempotencyKey has been renamed to idempotency_key and is no longer accepted. Send idempotency_key instead. Nothing was contacted or spent."
     };
   }
   if (modern !== void 0) return { key: modern, warnings: [] };
-  if (legacy !== void 0) {
-    return {
-      key: legacy,
-      warnings: [
-        "idempotencyKey is deprecated and will be removed in a future release of @haven_ai/mcp. Send idempotency_key instead \u2014 it is the spelling the hosted Haven MCP surface and every other Haven wire contract use."
-      ]
-    };
-  }
   return { warnings: [] };
 }
 function buildMcpToolsCallEnvelope(toolName, args) {
@@ -967,7 +1124,7 @@ function renderConsentBlock(input, hash) {
     lines.push("signed delegation, not by Haven):");
     for (const a of input.allowanceSummary) {
       const reset = a.resetMinutes ? ` per ${a.resetMinutes} min` : " (no reset)";
-      lines.push(`  \u2022 up to ${a.amount} ${a.token}${reset}`);
+      lines.push(`  \u2022 up to ${describeBudgetAmount(a, input.chainId)}${reset}`);
     }
   }
   lines.push("");
@@ -1064,7 +1221,14 @@ async function consentInputFromClient(haven, seed, toolNames) {
     }
     const liveAllowanceSummary = list.map((a) => ({
       token: a.tokenSymbol ?? "UNKNOWN",
-      amount: a.onchain?.amount ?? a.configuredAmount ?? "0",
+      // #3410: `onchain.amount` is the atomic budget (`budget_atomic` on the
+      // backend). The old `a.configuredAmount` fallback here was unreachable
+      // — `onchain` is required in the SDK types and dereferenced
+      // unconditionally, so a response without it throws into the seed path —
+      // and it was the one HUMAN-decimal value in this chain; a human number
+      // must never reach an atomic field. '0' keeps the (defensive) shape for
+      // a malformed onchain object without inventing a unit.
+      amount: a.onchain?.amount ?? "0",
       resetMinutes: typeof a.onchain?.resetTimeMin === "number" ? a.onchain.resetTimeMin : typeof a.resetPeriodMin === "number" ? a.resetPeriodMin : null
     }));
     allowanceSummary = liveAllowanceSummary;
@@ -1087,6 +1251,11 @@ function isAllowanceSummary(value) {
 function derivePrefix(apiKey) {
   return apiKey.slice(0, 12);
 }
+function describeBudgetAmount(a, chainId) {
+  const token = chainId === void 0 ? null : sdk.resolveTokenBySymbol(chainId, a.token);
+  if (!token) return `${a.amount} ${a.token} (atomic units)`;
+  return `${sdk.formatTokenAmount(a.amount, token.decimals)} ${a.token}`;
+}
 function registeredToolNames() {
   return Object.keys(toolSchemas);
 }
@@ -1111,7 +1280,7 @@ async function resolveHavenClient(options = {}) {
   return { client, credentials };
 }
 var MCP_NAME = "@haven_ai/mcp";
-var MCP_VERSION = "0.6.0-alpha.0";
+var MCP_VERSION = "0.8.0-alpha.0";
 var MCP_INSTRUCTIONS = [
   "Haven local MCP server: signs in-process with the delegate key it holds on",
   "this machine \u2014 the key never leaves this process. Call haven_get_agent",