@haven_ai/connect 0.0.0-dev.202609042048.ad6cc9b → 0.0.0-dev.202609050705.51c3d92

package/README.md

@@ -169,11 +169,11 @@ Pass `--json` when a launcher needs a machine-readable completion record. Connec
 writes progress and human recovery notes to stderr and exactly one JSON object
 to stdout, with `schema_version: 1` and `outcome` set to `complete`,
 `action_required`, or `failed`. Structured runs skip the interactive
-budget-approval wait so the record is emitted promptly; approve in the Haven
-dashboard whenever ready and verify later with the read-only `haven_get_agent`
+budget-approval wait so the record is emitted promptly; open `approval.url`
+whenever ready and verify later with the read-only `haven_get_agent`
 tool. The object includes runtime/topology status,
 probe result, activation and next-action guidance, approval state/expiry (null
-when the backend does not provide an approval expiry), the two
+when the backend does not provide an approval expiry) and `approval.url`, the two
 read-only verification tools, `hosted_mcp_url`, `superseded_agent_ids`, and —
 on a run that replaced existing wiring — `superseded_agents_retired_locally`
 with `retired_agent_ids`. It
@@ -182,6 +182,18 @@ contents, full credential paths, or full delegate address. The same redacted
 object is available to library callers as `runConnect(...).outcome`; the older
 fields remain for additive compatibility.
 
+`approval.url` (#2528) is the absolute link to this setup's budget approval,
+returned by the backend at register. Present only when `approval.required` is
+`true` **and** the backend is new enough to send one — a deployment older than
+#2528 omits the key entirely, which is why a caller must test for it rather
+than assume it. In prose mode the same link replaces "Return to Haven" in the
+printed next steps. It carries no secret (the setup token never appears in it),
+and it is the ONLY approval link a caller should use: the outcome carries no
+setup id, so there is nothing to assemble one from — relay the whole link or
+none. The connector also reports `run_mode` (`json` or `prose`) to the backend
+at register, so Haven can tell an automated setup from a narrated one; it is
+sent, not returned, and appears in no output.
+
 `hosted_mcp_url` is the hosted MCP endpoint this run wired up — **not** the
 backend URL you passed as `--api`. The hosted MCP server is a separate
 deployment, so the two differing is intended topology, not an environment

package/dist/cli.cjs

@@ -55,6 +55,7 @@ function createConnectApiClient(baseUrl, fetchImpl = fetch) {
         runtime: input.runtime,
         connector_version: input.connectorVersion,
         mcp_server_name: input.mcpServerName,
+        run_mode: input.runMode,
         connector_context: input.connectorContext,
         install_capabilities: input.installCapabilities && {
           can_write_runtime_config: input.installCapabilities.canWriteRuntimeConfig,
@@ -535,9 +536,9 @@ var init_runtime_manifest = __esm({
       mcpPackage: "@haven_ai/mcp",
       mcpVersion: mcp.MCP_VERSION,
       sdkPackage: "@haven_ai/sdk",
-      sdkVersion: "0.0.0-dev.202609042048.ad6cc9b",
+      sdkVersion: "0.0.0-dev.202609050705.51c3d92",
       signerPackage: "@haven_ai/signer",
-      signerVersion: "0.0.0-dev.202609042048.ad6cc9b",
+      signerVersion: "0.0.0-dev.202609050705.51c3d92",
       // Sourced from the SDK, never a literal (#1161). This field read '20.0.0'
       // while every package's `engines` said `>=24` and the docs said `>=24.0.0`,
       // so the guard that was supposed to enforce the floor waved Node v23 through
@@ -4388,7 +4389,7 @@ async function pathExists2(path) {
 init_unwire();
 init_local_mcp_runtime();
 init_runtime_manifest();
-var CONNECTOR_VERSION = "0.0.0-dev.202609042048.ad6cc9b";
+var CONNECTOR_VERSION = "0.0.0-dev.202609050705.51c3d92";
 var CONNECT_OUTCOME_SCHEMA_VERSION = 1;
 var failureOutcomesByError = /* @__PURE__ */ new WeakMap();
 function failureOutcomeFor(runtimeHint, error) {
@@ -4536,6 +4537,9 @@ async function executeConnect(options, deps, trace) {
       // slug — `serverNamesFor` is the one place the naming rule lives, and
       // the hosted name is what a user pastes into an MCP config.
       mcpServerName: serverNamesFor(serverName).hosted,
+      // #2528: 'prose' is the default because it is what a caller who says
+      // nothing is doing — the library entry point is not a --json run.
+      runMode: options.runMode ?? "prose",
       connectorContext: {
         environment_label: options.environmentLabel ?? "Local workspace",
         config_target: installCapabilities.canWriteRuntimeConfig ? "agent runtime MCP config" : "local credential files"
@@ -4623,7 +4627,7 @@ async function executeConnect(options, deps, trace) {
           environmentLabel: options.environmentLabel ?? "Local workspace"
         });
         if (!early.errorCode || early.errorCode === "manual_runtime_setup_required") {
-          log(approveBudgetCta(setup));
+          log(approveBudgetCta(setup, registration.approval_url));
         }
       } catch {
       }
@@ -4709,7 +4713,7 @@ async function executeConnect(options, deps, trace) {
   if (narrateApprovalWait && !runtimeInstall.errorCode) {
     approval = await waitForBudgetApproval(api, registration.setup_id, localApiKey, log, options.approvalWait);
   }
-  printNextSteps(runtimeInstall, log, approval);
+  printNextSteps(runtimeInstall, log, approval, registration.approval_url);
   const outcome = completionOutcome({
     runtimeInstall,
     delegateAddress: registration.delegate_address,
@@ -4718,7 +4722,8 @@ async function executeConnect(options, deps, trace) {
     supersededAgentsRetiredLocally,
     ...replacing ? { retiredAgentIds } : {},
     setupChallengeExpiresAt: setup.challenge.expires_at,
-    approvalRequired: registration.agent_status === "pending_approval"
+    approvalRequired: registration.agent_status === "pending_approval",
+    approvalUrl: registration.approval_url
   });
   if (await recordConnectOutcome(deps, credentialPaths.directory, outcome)) {
     log(`Saved this run's outcome to ${CONNECT_OUTCOME_FILENAME} in the agent's credential directory.`);
@@ -4751,7 +4756,16 @@ function completionOutcome(input) {
       instruction: manualSetup ? "Finish the manual MCP setup using the secret-free references shown in normal Connect output, then start a fresh session." : runtimeProfile(runtimeInstall.runtime).activationInstruction
     },
     next_action: nextAction2,
-    approval: { required: input.approvalRequired, expires_at: null },
+    approval: {
+      required: input.approvalRequired,
+      expires_at: null,
+      // Only when there is something to approve AND the backend supplied a
+      // link. Never synthesised here: the connector does not know the
+      // dashboard's origin, and a guessed URL is worse than none — it is the
+      // "do not invent one" rule the agent runbook states, applied to the
+      // tool rather than the agent.
+      ...input.approvalRequired && input.approvalUrl ? { url: input.approvalUrl } : {}
+    },
     verification: {
       tools: ["haven_get_agent", "haven_get_allowances"],
       instruction: runtimeVerificationInstruction(runtimeInstall.runtime)
@@ -4872,12 +4886,13 @@ function printSetupSummary(setup, log) {
   }
   log(`Setup challenge expires at ${setup.challenge.expires_at}. If it expires, return to Haven for a fresh setup and rerun Connect \u2014 do not reuse or paste credentials.`);
 }
-function approveBudgetCta(setup) {
+function approveBudgetCta(setup, approvalUrl) {
+  const where = approvalUrl ? `at ${approvalUrl}` : "in the Haven dashboard";
   const budgetPhrase = setup.agent_budget.length > 0 ? setup.agent_budget.map((budget) => `up to ${describeSetupBudget(budget)}`).join(", ") : void 0;
   if (budgetPhrase) {
-    return `\u2192 Action needed: approve this agent's budget \u2014 ${budgetPhrase} from ${setup.haven_wallet.name} on ${setup.haven_wallet.network} \u2014 in the Haven dashboard. The approval button is live now; setup continues here in the meantime.`;
+    return `\u2192 Action needed: approve this agent's budget \u2014 ${budgetPhrase} from ${setup.haven_wallet.name} on ${setup.haven_wallet.network} \u2014 ${where}. The approval button is live now; setup continues here in the meantime.`;
   }
-  return "\u2192 Action needed: approve this agent's budget in the Haven dashboard \u2014 the approval button is live now. Setup continues here in the meantime.";
+  return `\u2192 Action needed: approve this agent's budget ${where} \u2014 the approval button is live now. Setup continues here in the meantime.`;
 }
 function describeSetupBudget(budget) {
   return describeApprovedBudget({
@@ -4999,11 +5014,12 @@ async function waitForBudgetApproval(api, setupId, apiKey, log, options = {}) {
   );
   return "pending";
 }
-function completionHandoffLines(result, approval) {
+function completionHandoffLines(result, approval, approvalUrl) {
+  const approveStep = approvalUrl ? `Approve the budget at ${approvalUrl}. Approval \u2014 not restarting \u2014 unlocks Haven tools.` : "Return to Haven and approve the budget. Approval \u2014 not restarting \u2014 unlocks Haven tools.";
   if (result.errorCode === "manual_runtime_setup_required") {
     return [
       "Next steps:",
-      "1. Return to Haven and approve the budget. Approval \u2014 not restarting \u2014 unlocks Haven tools.",
+      `1. ${approveStep}`,
       "2. Finish the manual MCP setup using the secret-free file references printed above, then start a fresh session in your runtime.",
       `3. ${runtimeVerificationInstruction(result.runtime)}`
     ];
@@ -5029,7 +5045,7 @@ function completionHandoffLines(result, approval) {
   }
   return [
     "Next steps:",
-    "1. Return to Haven and approve the budget. Approval \u2014 not restarting \u2014 unlocks Haven tools.",
+    `1. ${approveStep}`,
     `2. ${activation}`,
     `3. ${runtimeVerificationInstruction(result.runtime)}`
   ];
@@ -5070,8 +5086,8 @@ async function listOtherAgentIds(baseDir, currentDirectory) {
   }
   return ids;
 }
-function printNextSteps(result, log, approval) {
-  for (const line of completionHandoffLines(result, approval)) log(line);
+function printNextSteps(result, log, approval, approvalUrl) {
+  for (const line of completionHandoffLines(result, approval, approvalUrl)) log(line);
 }
 
 // src/args.ts
@@ -5583,7 +5599,13 @@ async function runCli(argv, io = {
         // configure. --json is the automation contract — it must fail with a
         // machine-readable code, never block on stdin. runConnect additionally
         // requires a real TTY before it prompts.
-        interactive: !parsed.json
+        interactive: !parsed.json,
+        // #2528: reported to the backend at register, so the funnel can tell a
+        // machine-readable run from a narrated one. Read from the SAME
+        // `parsed.json` the three flags above use, rather than inferred later
+        // from `waitForApproval` — that flag is already false for a prose run
+        // with no TTY (#2484), so inferring would mislabel real prose runs.
+        runMode: parsed.json ? "json" : "prose"
       },
       {
         log: (message) => (parsed.json ? io.stderr : io.stdout)(`${message}