@haven_ai/connect 0.0.0-dev.202609140633.f7cefe8 → 0.0.0-dev.202609141042.b4fd152

package/README.md

@@ -101,6 +101,13 @@ one agent and sign as another, and it fails hard. This is the half of that
 hazard a local tool can know — the doctor still cannot see inside an
 already-running host, which is why the restart guidance below matters.
 
+The hosted MCP `tools/list` row is an endpoint-reachability handshake, not a
+credential-authentication result. When doctor classifies a superseded
+directory, it uses the same authenticated, read-only identity endpoint: a
+401/403 means the stored key is already revoked; a successful identity read
+means it remains spend-capable; and network or malformed responses remain
+unverifiable.
+
 ## Retiring an old agent directory
 
 Re-running setup without `--replace` creates a NEW agent and retires nothing

package/dist/cli.cjs

@@ -557,9 +557,9 @@ var init_runtime_manifest = __esm({
       mcpPackage: "@haven_ai/mcp",
       mcpVersion: mcp.MCP_VERSION,
       sdkPackage: "@haven_ai/sdk",
-      sdkVersion: "0.0.0-dev.202609140633.f7cefe8",
+      sdkVersion: "0.0.0-dev.202609141042.b4fd152",
       signerPackage: "@haven_ai/signer",
-      signerVersion: "0.0.0-dev.202609140633.f7cefe8",
+      signerVersion: "0.0.0-dev.202609141042.b4fd152",
       // Sourced from the SDK, never a literal (#1161). This field read '20.0.0'
       // while every package's `engines` said `>=24` and the docs said `>=24.0.0`,
       // so the guard that was supposed to enforce the floor waved Node v23 through
@@ -2665,7 +2665,7 @@ async function installRuntime(input, deps = {}) {
   (signerProbe === void 0 || signerProbe.status === "ok");
   const restartRequired = configResult.restartRequired || restartRequiredForRuntime(runtime, deps.env);
   const errorCode = configResult.errorCode ?? (configResult.runtimeMcpMode === "local_stdio" ? localMcpErrorCode(signerCredentialReady, localMcpConsent, localMcpProbe?.status) : hostedMcpErrorCode(configResult.hostedConfigured, hostedProbe.status) ?? signerConsentErrorCode(signerCredentialReady, signerConsent) ?? signerProbeErrorCode(signerProbe));
-  const hostedProbeMessages = configResult.hostedConfigured && hostedProbe.status !== "ok" ? [`Hosted Haven MCP probe failed: ${hostedProbe.status}.`] : configResult.hostedConfigured ? ["Verified hosted Haven MCP tools with a read-only handshake."] : [];
+  const hostedProbeMessages = configResult.hostedConfigured && hostedProbe.status !== "ok" ? [`Hosted Haven MCP probe failed: ${hostedProbe.status}.`] : configResult.hostedConfigured ? ["Verified that the hosted Haven MCP tools endpoint responds to a read-only handshake."] : [];
   const signerProbeMessages = signerProbe ? signerProbe.status === "ok" ? ["Verified local Haven signer with a stdio handshake."] : [
     `Local Haven signer handshake failed: ${signerProbe.status}.`,
     `Re-run \`${sdk.connectorRerunCommand()}\` to repair the signer setup.`
@@ -3735,9 +3735,9 @@ async function checksForAgent(entry, input, deps) {
       id: "hosted_mcp",
       label: "Hosted Haven MCP",
       ok: probe.status === "ok",
-      detail: probe.status === "ok" ? `Reachable and authorized (${hostedUrl}).` : `Probe failed: ${probe.status} (${hostedUrl}).`,
+      detail: probe.status === "ok" ? `MCP tools endpoint is reachable (${hostedUrl}).` : `MCP tools endpoint probe failed: ${probe.status} (${hostedUrl}).`,
       ...probe.status === "ok" ? {} : {
-        repair: probe.status === "unauthorized" ? `The stored API key was rejected \u2014 re-run the full setup with a fresh token: ${RERUN} --setup <token>.` : "Check network access to the hosted MCP URL, then re-run --doctor."
+        repair: "Check network access and runtime configuration for the hosted MCP URL, then re-run --doctor."
       }
     });
   } else {
@@ -3971,14 +3971,17 @@ async function runDoctor(input, deps = {}) {
       const identity = await readIdentity(entry.directory);
       const tombstone = await readAgentTombstone(entry.directory);
       const otherAgent = entry.agentId ?? path.basename(entry.directory);
-      const otherUrl = identity?.hosted_mcp_url ?? (identity?.api_url ? `${identity.api_url}/mcp` : void 0);
-      if (!identity?.api_key || !otherUrl) {
+      if (!identity?.api_key || !identity.api_url) {
         if (tombstone) retired.push(`${otherAgent} (retired ${tombstone.retired_at})`);
-        else unverifiable.push(`${otherAgent} (no stored key/URL to probe)`);
+        else unverifiable.push(`${otherAgent} (no stored key/API URL to probe)`);
         continue;
       }
       const suffix = tombstone ? " [tombstoned \u2014 key material still present]" : "";
-      const probe = await (deps.probeHosted ?? probeHostedMcpTools)(identity.api_key, otherUrl, deps.fetch);
+      const probe = await (deps.probeHostedIdentity ?? probeHostedAgentIdentity)(
+        identity.api_key,
+        identity.api_url,
+        deps.fetch
+      );
       if (probe.status === "ok") live.push({ label: `${otherAgent}${suffix}`, entry });
       else if (probe.status === "unauthorized") revoked.push(`${otherAgent}${suffix}`);
       else unverifiable.push(`${otherAgent} (${probe.status})${suffix}`);
@@ -4422,7 +4425,7 @@ async function pathExists2(path) {
 init_unwire();
 init_local_mcp_runtime();
 init_runtime_manifest();
-var CONNECTOR_VERSION = "0.0.0-dev.202609140633.f7cefe8";
+var CONNECTOR_VERSION = "0.0.0-dev.202609141042.b4fd152";
 var CONNECT_OUTCOME_SCHEMA_VERSION = 1;
 var failureOutcomesByError = /* @__PURE__ */ new WeakMap();
 function failureOutcomeFor(runtimeHint, error) {