@haven_ai/mcp 0.6.0-alpha.0 → 0.8.0-alpha.0

package/dist/index.d.cts

@@ -66,24 +66,30 @@ declare function loadCredentials(source?: string | HavenCredentialSource | undef
  * which is where URL-hardening would matter.)
  */
 
-type HavenMcpToolName = 'haven_send' | 'haven_pay_mcp_tool' | 'haven_quote_x402' | 'haven_pay_x402_quote' | 'haven_pay_x402' | 'haven_resume_x402_payment' | 'haven_get_payment_status' | 'haven_get_resume_state' | 'haven_get_agent' | 'haven_get_allowances' | 'haven_list_receipts' | 'haven_verify_receipt' | 'haven_sweep_delegate' | 'haven_discover_tools' | 'haven_submit_catalog_entry' | 'haven_open_task_budget' | 'haven_close_task_budget' | 'haven_submit';
+type HavenMcpToolName = 'haven_send' | 'haven_pay_mcp_tool' | 'haven_quote_x402' | 'haven_pay_x402_quote' | 'haven_pay_x402' | 'haven_resume_x402_payment' | 'haven_get_payment_status' | 'haven_get_resume_state' | 'haven_get_agent' | 'haven_get_allowances' | 'haven_list_receipts' | 'haven_verify_receipt' | 'haven_sweep_delegate' | 'haven_discover_tools' | 'haven_submit_catalog_entry' | 'haven_open_task_budget' | 'haven_close_task_budget' | 'haven_get_task_budget' | 'haven_submit';
 declare const toolSchemas: {
     readonly haven_send: {
         readonly asset: z.ZodEnum<["ETH", "USDC"]>;
         readonly recipient: z.ZodString;
         readonly amount: z.ZodString;
         readonly idempotency_key: z.ZodOptional<z.ZodString>;
-        /** Legacy spelling, accepted during the #2366 window. Warns; do not use. */
+        /** REMOVED (#3411): declared only so the resolver can refuse it by name, never accepted. */
         readonly idempotencyKey: z.ZodOptional<z.ZodString>;
         /** #3329: spend against an open task budget instead of the agent's period budget. */
         readonly task_budget_id: z.ZodOptional<z.ZodString>;
+        /**
+         * #3330: spend against an open sub-budget this agent HOLDS (it is the
+         * sub-agent B) instead of the agent's own budget. Mutually exclusive
+         * with task_budget_id — the backend refuses a body naming both.
+         */
+        readonly sub_budget_id: z.ZodOptional<z.ZodString>;
     };
     readonly haven_pay_mcp_tool: {
         readonly merchant_url: z.ZodString;
         readonly tool_name: z.ZodString;
         readonly arguments: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
         readonly idempotency_key: z.ZodOptional<z.ZodString>;
-        /** Legacy spelling, accepted during the #2366 window. Warns; do not use. */
+        /** REMOVED (#3411): declared only so the resolver can refuse it by name, never accepted. */
         readonly idempotencyKey: z.ZodOptional<z.ZodString>;
     };
     readonly haven_quote_x402: {
@@ -92,16 +98,18 @@ declare const toolSchemas: {
         readonly headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
         readonly body: z.ZodOptional<z.ZodString>;
         readonly idempotency_key: z.ZodOptional<z.ZodString>;
-        /** Legacy spelling, accepted during the #2366 window. Warns; do not use. */
+        /** REMOVED (#3411): declared only so the resolver can refuse it by name, never accepted. */
         readonly idempotencyKey: z.ZodOptional<z.ZodString>;
     };
     readonly haven_pay_x402_quote: {
         readonly quote: z.ZodUnknown;
         readonly idempotency_key: z.ZodOptional<z.ZodString>;
-        /** Legacy spelling, accepted during the #2366 window. Warns; do not use. */
+        /** REMOVED (#3411): declared only so the resolver can refuse it by name, never accepted. */
         readonly idempotencyKey: z.ZodOptional<z.ZodString>;
         /** #3329: spend against an open task budget instead of the agent's period budget. */
         readonly task_budget_id: z.ZodOptional<z.ZodString>;
+        /** #3330: spend against an open sub-budget this agent holds (it is sub-agent B). Mutually exclusive with task_budget_id. */
+        readonly sub_budget_id: z.ZodOptional<z.ZodString>;
     };
     readonly haven_pay_x402: {
         readonly url: z.ZodString;
@@ -109,10 +117,12 @@ declare const toolSchemas: {
         readonly headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
         readonly body: z.ZodOptional<z.ZodString>;
         readonly idempotency_key: z.ZodOptional<z.ZodString>;
-        /** Legacy spelling, accepted during the #2366 window. Warns; do not use. */
+        /** REMOVED (#3411): declared only so the resolver can refuse it by name, never accepted. */
         readonly idempotencyKey: z.ZodOptional<z.ZodString>;
         /** #3329: spend against an open task budget instead of the agent's period budget. */
         readonly task_budget_id: z.ZodOptional<z.ZodString>;
+        /** #3330: spend against an open sub-budget this agent holds (it is sub-agent B). Mutually exclusive with task_budget_id. */
+        readonly sub_budget_id: z.ZodOptional<z.ZodString>;
     };
     readonly haven_resume_x402_payment: {
         readonly payment_id: z.ZodOptional<z.ZodString>;
@@ -141,6 +151,8 @@ declare const toolSchemas: {
         readonly limit: z.ZodOptional<z.ZodNumber>;
         /** #3128: the previous page's next_cursor (a receipt id). */
         readonly cursor: z.ZodOptional<z.ZodString>;
+        /** #3423: drop each row's payload echoes; the default shape is unchanged. */
+        readonly compact: z.ZodOptional<z.ZodBoolean>;
     };
     readonly haven_verify_receipt: {
         readonly receipt: z.ZodUnknown;
@@ -155,8 +167,12 @@ declare const toolSchemas: {
     readonly haven_close_task_budget: {
         readonly task_budget_id: z.ZodString;
     };
+    readonly haven_get_task_budget: {
+        readonly task_budget_id: z.ZodString;
+    };
     readonly haven_submit: {
         readonly task_budget_id: z.ZodOptional<z.ZodString>;
+        readonly sub_budget_id: z.ZodOptional<z.ZodString>;
         readonly payment_id: z.ZodOptional<z.ZodString>;
         readonly signature: z.ZodString;
     };
@@ -183,7 +199,9 @@ interface ToolSuccess<T> {
     /**
      * #3303: the backend's `client_update` hint when this package is behind the
      * version the deployment recommends (`required: false`) or below its
-     * minimum (`required: true`). Carries the exact command that updates it.
+     * minimum (`required: true`). `upgrade_command` starts the update: for the
+     * connector-installed packages it is the connector doctor, which prints the
+     * repair line to run next (#3412).
      */
     client_update?: HavenClientUpdate;
 }
@@ -275,6 +293,20 @@ interface ConsentInput {
     /** Chain the agent operates on. */
     chainId?: number;
     toolNames: readonly HavenMcpToolName[];
+    /**
+     * #3410: every amount here is ATOMIC (smallest on-chain units, e.g. 6
+     * decimals for USDC — `1000000` is one USDC, never "1000000 tokens"). Both
+     * producers agree: the live read takes `onchain.amount`, and the seed takes
+     * the credential file's `allowance_amount` — both atomic. `renderConsentBlock`
+     * converts for display through the token registry and falls back to an
+     * explicit `(atomic units)` label when the token is unknown; the consent
+     * hash deliberately covers the atomic string, so a display change alone
+     * never re-prompts the operator.
+     *
+     * Known limitation (#3410, stated not fixed): the seed is setup-time data.
+     * If the wallet owner edits the budget after setup AND the live read then
+     * fails, the screen shows the stale seed budget as if it were current.
+     */
     allowanceSummary: readonly {
         token: string;
         amount: string;
@@ -315,7 +347,12 @@ interface CredentialIdentitySeed {
     delegateAddress?: string;
     /** Chain from the credential file, used as a fallback. */
     chainId?: number;
-    /** Intended agent budget from the setup flow, used before on-chain approval is visible. */
+    /**
+     * Intended agent budget from the setup flow, used before on-chain approval
+     * is visible. #3410: every amount is ATOMIC — the connector writes the
+     * credential file's `allowance_amount` straight from the setup response's
+     * `agent_budget`, and the backend puts `budget_atomic` there.
+     */
     allowanceSummary?: readonly {
         token: string;
         amount: string;
@@ -374,7 +411,7 @@ declare function createHavenMcpServer(options?: HavenMcpServerOptions): Promise<
  * `agent_tool_invocations` rows are always attributed to the right tool.
  */
 declare const MCP_NAME = "@haven_ai/mcp";
-declare const MCP_VERSION = "0.6.0-alpha.0";
+declare const MCP_VERSION = "0.8.0-alpha.0";
 /**
  * Refuse to start on an unsupported Node (#1161).
  *
@@ -387,4 +424,39 @@ declare const MCP_VERSION = "0.6.0-alpha.0";
 declare function assertSupportedNodeVersion(nodeVersion?: string): void;
 declare function runStdioServer(options?: HavenMcpServerOptions): Promise<void>;
 
-export { type ConsentDecision, type ConsentInput, type ConsentOptions, type CredentialIdentitySeed, type HavenCredentialAllowance, type HavenCredentialFile, type HavenCredentialSource, type HavenMcpServerOptions, type HavenMcpToolName, MCP_NAME, MCP_VERSION, type ToolFailure, type ToolPayload, type ToolSuccess, assertSupportedNodeVersion, computeConsentHash, consentInputFromClient, createHavenClient, createHavenMcpServer, createToolHandlers, ensureConsent, loadCredentials, registeredToolNames, renderConsentBlock, resolveHavenClient, runStdioServer, toolDescriptions, toolSchemas };
+/**
+ * The first `@haven_ai/signer` release whose `haven_sign` accepts the
+ * `task_budget_id` argument form (#3329). ONE constant on this surface, with
+ * exactly one job: the value `signer_compatibility.min_signer_version`
+ * reports on the two task-budget handoffs below. The hosted package exports
+ * `TASK_BUDGET_MIN_SIGNER_VERSION` with the same value, tied to the same
+ * release record (`client-releases.data.ts`) by its cross-package pin.
+ */
+declare const TASK_BUDGET_MIN_SIGNER_VERSION = "0.6.0-alpha.0";
+/** The capability key both runtimes report in `signer_compatibility.signer_capability`. */
+declare const SIGNER_CAPABILITY_KEY = "haven/signer-compatibility";
+/**
+ * The recovery notice every result that hands off to
+ * `haven_sign { task_budget_id }` carries — the local twin of the hosted
+ * `taskSignerCompatibilityNotice()`. Field-for-field the same shape:
+ *
+ * - `task_sign_context_version` — from the SDK's single source;
+ * - `min_signer_version` — the constant above;
+ * - `signer_capability` — the existing capability key;
+ * - `check` / `fallback` — the recovery sentence as prose and as data: the
+ *   trigger substring (the generic refusal every pre-0.6.0 signer answers,
+ *   both historic lines begin with it), then close the pending budget, update
+ *   via the connector doctor and its printed repair line, reopen. No relay
+ *   fallback exists for this signing context (an `eip712_delegation` payload
+ *   the 0.5.x unbound allowlist refuses and a 0.4.x signer must not be
+ *   steered into), so none is named.
+ */
+declare function taskSignerCompatibilityNotice(): {
+    task_sign_context_version: number;
+    min_signer_version: string;
+    signer_capability: string;
+    check: string;
+    fallback: string;
+};
+
+export { type ConsentDecision, type ConsentInput, type ConsentOptions, type CredentialIdentitySeed, type HavenCredentialAllowance, type HavenCredentialFile, type HavenCredentialSource, type HavenMcpServerOptions, type HavenMcpToolName, MCP_NAME, MCP_VERSION, SIGNER_CAPABILITY_KEY, TASK_BUDGET_MIN_SIGNER_VERSION, type ToolFailure, type ToolPayload, type ToolSuccess, assertSupportedNodeVersion, computeConsentHash, consentInputFromClient, createHavenClient, createHavenMcpServer, createToolHandlers, ensureConsent, loadCredentials, registeredToolNames, renderConsentBlock, resolveHavenClient, runStdioServer, taskSignerCompatibilityNotice, toolDescriptions, toolSchemas };

package/dist/index.d.ts

@@ -66,24 +66,30 @@ declare function loadCredentials(source?: string | HavenCredentialSource | undef
  * which is where URL-hardening would matter.)
  */
 
-type HavenMcpToolName = 'haven_send' | 'haven_pay_mcp_tool' | 'haven_quote_x402' | 'haven_pay_x402_quote' | 'haven_pay_x402' | 'haven_resume_x402_payment' | 'haven_get_payment_status' | 'haven_get_resume_state' | 'haven_get_agent' | 'haven_get_allowances' | 'haven_list_receipts' | 'haven_verify_receipt' | 'haven_sweep_delegate' | 'haven_discover_tools' | 'haven_submit_catalog_entry' | 'haven_open_task_budget' | 'haven_close_task_budget' | 'haven_submit';
+type HavenMcpToolName = 'haven_send' | 'haven_pay_mcp_tool' | 'haven_quote_x402' | 'haven_pay_x402_quote' | 'haven_pay_x402' | 'haven_resume_x402_payment' | 'haven_get_payment_status' | 'haven_get_resume_state' | 'haven_get_agent' | 'haven_get_allowances' | 'haven_list_receipts' | 'haven_verify_receipt' | 'haven_sweep_delegate' | 'haven_discover_tools' | 'haven_submit_catalog_entry' | 'haven_open_task_budget' | 'haven_close_task_budget' | 'haven_get_task_budget' | 'haven_submit';
 declare const toolSchemas: {
     readonly haven_send: {
         readonly asset: z.ZodEnum<["ETH", "USDC"]>;
         readonly recipient: z.ZodString;
         readonly amount: z.ZodString;
         readonly idempotency_key: z.ZodOptional<z.ZodString>;
-        /** Legacy spelling, accepted during the #2366 window. Warns; do not use. */
+        /** REMOVED (#3411): declared only so the resolver can refuse it by name, never accepted. */
         readonly idempotencyKey: z.ZodOptional<z.ZodString>;
         /** #3329: spend against an open task budget instead of the agent's period budget. */
         readonly task_budget_id: z.ZodOptional<z.ZodString>;
+        /**
+         * #3330: spend against an open sub-budget this agent HOLDS (it is the
+         * sub-agent B) instead of the agent's own budget. Mutually exclusive
+         * with task_budget_id — the backend refuses a body naming both.
+         */
+        readonly sub_budget_id: z.ZodOptional<z.ZodString>;
     };
     readonly haven_pay_mcp_tool: {
         readonly merchant_url: z.ZodString;
         readonly tool_name: z.ZodString;
         readonly arguments: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
         readonly idempotency_key: z.ZodOptional<z.ZodString>;
-        /** Legacy spelling, accepted during the #2366 window. Warns; do not use. */
+        /** REMOVED (#3411): declared only so the resolver can refuse it by name, never accepted. */
         readonly idempotencyKey: z.ZodOptional<z.ZodString>;
     };
     readonly haven_quote_x402: {
@@ -92,16 +98,18 @@ declare const toolSchemas: {
         readonly headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
         readonly body: z.ZodOptional<z.ZodString>;
         readonly idempotency_key: z.ZodOptional<z.ZodString>;
-        /** Legacy spelling, accepted during the #2366 window. Warns; do not use. */
+        /** REMOVED (#3411): declared only so the resolver can refuse it by name, never accepted. */
         readonly idempotencyKey: z.ZodOptional<z.ZodString>;
     };
     readonly haven_pay_x402_quote: {
         readonly quote: z.ZodUnknown;
         readonly idempotency_key: z.ZodOptional<z.ZodString>;
-        /** Legacy spelling, accepted during the #2366 window. Warns; do not use. */
+        /** REMOVED (#3411): declared only so the resolver can refuse it by name, never accepted. */
         readonly idempotencyKey: z.ZodOptional<z.ZodString>;
         /** #3329: spend against an open task budget instead of the agent's period budget. */
         readonly task_budget_id: z.ZodOptional<z.ZodString>;
+        /** #3330: spend against an open sub-budget this agent holds (it is sub-agent B). Mutually exclusive with task_budget_id. */
+        readonly sub_budget_id: z.ZodOptional<z.ZodString>;
     };
     readonly haven_pay_x402: {
         readonly url: z.ZodString;
@@ -109,10 +117,12 @@ declare const toolSchemas: {
         readonly headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
         readonly body: z.ZodOptional<z.ZodString>;
         readonly idempotency_key: z.ZodOptional<z.ZodString>;
-        /** Legacy spelling, accepted during the #2366 window. Warns; do not use. */
+        /** REMOVED (#3411): declared only so the resolver can refuse it by name, never accepted. */
         readonly idempotencyKey: z.ZodOptional<z.ZodString>;
         /** #3329: spend against an open task budget instead of the agent's period budget. */
         readonly task_budget_id: z.ZodOptional<z.ZodString>;
+        /** #3330: spend against an open sub-budget this agent holds (it is sub-agent B). Mutually exclusive with task_budget_id. */
+        readonly sub_budget_id: z.ZodOptional<z.ZodString>;
     };
     readonly haven_resume_x402_payment: {
         readonly payment_id: z.ZodOptional<z.ZodString>;
@@ -141,6 +151,8 @@ declare const toolSchemas: {
         readonly limit: z.ZodOptional<z.ZodNumber>;
         /** #3128: the previous page's next_cursor (a receipt id). */
         readonly cursor: z.ZodOptional<z.ZodString>;
+        /** #3423: drop each row's payload echoes; the default shape is unchanged. */
+        readonly compact: z.ZodOptional<z.ZodBoolean>;
     };
     readonly haven_verify_receipt: {
         readonly receipt: z.ZodUnknown;
@@ -155,8 +167,12 @@ declare const toolSchemas: {
     readonly haven_close_task_budget: {
         readonly task_budget_id: z.ZodString;
     };
+    readonly haven_get_task_budget: {
+        readonly task_budget_id: z.ZodString;
+    };
     readonly haven_submit: {
         readonly task_budget_id: z.ZodOptional<z.ZodString>;
+        readonly sub_budget_id: z.ZodOptional<z.ZodString>;
         readonly payment_id: z.ZodOptional<z.ZodString>;
         readonly signature: z.ZodString;
     };
@@ -183,7 +199,9 @@ interface ToolSuccess<T> {
     /**
      * #3303: the backend's `client_update` hint when this package is behind the
      * version the deployment recommends (`required: false`) or below its
-     * minimum (`required: true`). Carries the exact command that updates it.
+     * minimum (`required: true`). `upgrade_command` starts the update: for the
+     * connector-installed packages it is the connector doctor, which prints the
+     * repair line to run next (#3412).
      */
     client_update?: HavenClientUpdate;
 }
@@ -275,6 +293,20 @@ interface ConsentInput {
     /** Chain the agent operates on. */
     chainId?: number;
     toolNames: readonly HavenMcpToolName[];
+    /**
+     * #3410: every amount here is ATOMIC (smallest on-chain units, e.g. 6
+     * decimals for USDC — `1000000` is one USDC, never "1000000 tokens"). Both
+     * producers agree: the live read takes `onchain.amount`, and the seed takes
+     * the credential file's `allowance_amount` — both atomic. `renderConsentBlock`
+     * converts for display through the token registry and falls back to an
+     * explicit `(atomic units)` label when the token is unknown; the consent
+     * hash deliberately covers the atomic string, so a display change alone
+     * never re-prompts the operator.
+     *
+     * Known limitation (#3410, stated not fixed): the seed is setup-time data.
+     * If the wallet owner edits the budget after setup AND the live read then
+     * fails, the screen shows the stale seed budget as if it were current.
+     */
     allowanceSummary: readonly {
         token: string;
         amount: string;
@@ -315,7 +347,12 @@ interface CredentialIdentitySeed {
     delegateAddress?: string;
     /** Chain from the credential file, used as a fallback. */
     chainId?: number;
-    /** Intended agent budget from the setup flow, used before on-chain approval is visible. */
+    /**
+     * Intended agent budget from the setup flow, used before on-chain approval
+     * is visible. #3410: every amount is ATOMIC — the connector writes the
+     * credential file's `allowance_amount` straight from the setup response's
+     * `agent_budget`, and the backend puts `budget_atomic` there.
+     */
     allowanceSummary?: readonly {
         token: string;
         amount: string;
@@ -374,7 +411,7 @@ declare function createHavenMcpServer(options?: HavenMcpServerOptions): Promise<
  * `agent_tool_invocations` rows are always attributed to the right tool.
  */
 declare const MCP_NAME = "@haven_ai/mcp";
-declare const MCP_VERSION = "0.6.0-alpha.0";
+declare const MCP_VERSION = "0.8.0-alpha.0";
 /**
  * Refuse to start on an unsupported Node (#1161).
  *
@@ -387,4 +424,39 @@ declare const MCP_VERSION = "0.6.0-alpha.0";
 declare function assertSupportedNodeVersion(nodeVersion?: string): void;
 declare function runStdioServer(options?: HavenMcpServerOptions): Promise<void>;
 
-export { type ConsentDecision, type ConsentInput, type ConsentOptions, type CredentialIdentitySeed, type HavenCredentialAllowance, type HavenCredentialFile, type HavenCredentialSource, type HavenMcpServerOptions, type HavenMcpToolName, MCP_NAME, MCP_VERSION, type ToolFailure, type ToolPayload, type ToolSuccess, assertSupportedNodeVersion, computeConsentHash, consentInputFromClient, createHavenClient, createHavenMcpServer, createToolHandlers, ensureConsent, loadCredentials, registeredToolNames, renderConsentBlock, resolveHavenClient, runStdioServer, toolDescriptions, toolSchemas };
+/**
+ * The first `@haven_ai/signer` release whose `haven_sign` accepts the
+ * `task_budget_id` argument form (#3329). ONE constant on this surface, with
+ * exactly one job: the value `signer_compatibility.min_signer_version`
+ * reports on the two task-budget handoffs below. The hosted package exports
+ * `TASK_BUDGET_MIN_SIGNER_VERSION` with the same value, tied to the same
+ * release record (`client-releases.data.ts`) by its cross-package pin.
+ */
+declare const TASK_BUDGET_MIN_SIGNER_VERSION = "0.6.0-alpha.0";
+/** The capability key both runtimes report in `signer_compatibility.signer_capability`. */
+declare const SIGNER_CAPABILITY_KEY = "haven/signer-compatibility";
+/**
+ * The recovery notice every result that hands off to
+ * `haven_sign { task_budget_id }` carries — the local twin of the hosted
+ * `taskSignerCompatibilityNotice()`. Field-for-field the same shape:
+ *
+ * - `task_sign_context_version` — from the SDK's single source;
+ * - `min_signer_version` — the constant above;
+ * - `signer_capability` — the existing capability key;
+ * - `check` / `fallback` — the recovery sentence as prose and as data: the
+ *   trigger substring (the generic refusal every pre-0.6.0 signer answers,
+ *   both historic lines begin with it), then close the pending budget, update
+ *   via the connector doctor and its printed repair line, reopen. No relay
+ *   fallback exists for this signing context (an `eip712_delegation` payload
+ *   the 0.5.x unbound allowlist refuses and a 0.4.x signer must not be
+ *   steered into), so none is named.
+ */
+declare function taskSignerCompatibilityNotice(): {
+    task_sign_context_version: number;
+    min_signer_version: string;
+    signer_capability: string;
+    check: string;
+    fallback: string;
+};
+
+export { type ConsentDecision, type ConsentInput, type ConsentOptions, type CredentialIdentitySeed, type HavenCredentialAllowance, type HavenCredentialFile, type HavenCredentialSource, type HavenMcpServerOptions, type HavenMcpToolName, MCP_NAME, MCP_VERSION, SIGNER_CAPABILITY_KEY, TASK_BUDGET_MIN_SIGNER_VERSION, type ToolFailure, type ToolPayload, type ToolSuccess, assertSupportedNodeVersion, computeConsentHash, consentInputFromClient, createHavenClient, createHavenMcpServer, createToolHandlers, ensureConsent, loadCredentials, registeredToolNames, renderConsentBlock, resolveHavenClient, runStdioServer, taskSignerCompatibilityNotice, toolDescriptions, toolSchemas };