@haven_ai/connect 0.0.0-dev.202609200127.a29d546 → 0.0.0-dev.202609230656.9b1d80a

package/README.md

@@ -640,6 +640,7 @@ across the rest is yours.
 ## Diagnosing a stuck setup: `--doctor` / `--repair` (#1589)
 
 ```bash
+npx @haven_ai/connect@<channel> --doctor
 npx @haven_ai/connect@<channel> --doctor --runtime codex-desktop
 npx @haven_ai/connect@<channel> --doctor --repair --runtime codex-desktop
 ```
@@ -649,6 +650,16 @@ not indifferent: `signer_runtime` compares the sidecar against the manifest of
 the connector **that runs the check**, so a doctor from another channel reports
 a skew that is not there. Use the channel your dashboard hands out.
 
+`--runtime` is optional for `--doctor` and required for `--repair` (#3210).
+Without the flag the doctor checks the runtime the setup recorded in the
+agent directory's `last-connect-outcome.json` (#3120), and the `runtime_config`
+verdict says which runtime it resolved and from which file; when no
+record names one, the `runtime_config` check FAILS with "Runtime is unknown —
+the runtime config was NOT checked" and the exit code is 1 — never a pass on a
+config it did not open. `--repair` rewrites that config, so the runtime it
+rewrites is named on the command line rather than inherited from a record on
+disk: a flagless `--repair` is refused before anything runs.
+
 `--doctor` is read-only and needs NO setup token: it checks the runtime config,
 the agent credential files, the pinned signer runtime install (and, since
 #2424, whether that install was made under a local runtime-spec override —

package/dist/cli.cjs

@@ -619,9 +619,9 @@ var init_runtime_manifest = __esm({
       mcpPackage: "@haven_ai/mcp",
       mcpVersion: mcp.MCP_VERSION,
       sdkPackage: "@haven_ai/sdk",
-      sdkVersion: "0.0.0-dev.202609200127.a29d546",
+      sdkVersion: "0.0.0-dev.202609230656.9b1d80a",
       signerPackage: "@haven_ai/signer",
-      signerVersion: "0.0.0-dev.202609200127.a29d546",
+      signerVersion: "0.0.0-dev.202609230656.9b1d80a",
       // Sourced from the SDK, never a literal (#1161). This field read '20.0.0'
       // while every package's `engines` said `>=24` and the docs said `>=24.0.0`,
       // so the guard that was supposed to enforce the floor waved Node v23 through
@@ -3808,6 +3808,10 @@ function rollUpLevel(checks) {
 function runtimeFlagFor(runtime) {
   return normalizeRuntimeName(runtime) ? ` --runtime ${runtime}` : "";
 }
+function repairCommandFor(runtime, suffix = "") {
+  if (normalizeRuntimeName(runtime)) return `Run: ${RERUN} --doctor --repair --runtime ${runtime}${suffix}`;
+  return `Run: ${RERUN} --doctor --repair --runtime <runtime>${suffix.replace(/\.$/, "")} \u2014 --repair needs the runtime named; one of: ${RUNTIME_FLAG_VALUE_LIST.join(", ")}.`;
+}
 async function resolveDoctorRuntime(input, directory) {
   const explicit = input.runtime.trim();
   if (explicit) return { runtime: explicit, origin: "flag" };
@@ -4010,7 +4014,7 @@ async function verdictsForAgent(entry, input, deps) {
       label: "Signer runtime (preinstalled wrapper)",
       level: "failed",
       detail: "No signer-runtime.json sidecar \u2014 the pinned signer runtime was never prepared (or a pre-#1586 npx config).",
-      repair: `Run: ${RERUN} --doctor --repair${runtimeFlagFor(input.runtime)}`
+      repair: repairCommandFor(input.runtime)
     });
   } else if (sidecar.runtime_spec_override) {
     const matches = await installedRuntimeMatchesVersions(sidecar.runtime_directory, sidecar.cli_path, {
@@ -4022,7 +4026,7 @@ async function verdictsForAgent(entry, input, deps) {
       label: "Signer runtime (preinstalled wrapper)",
       level: matches ? "ok" : "failed",
       detail: matches ? `Installed ${sidecar.signer_package}@${sidecar.signer_version} at ${sidecar.runtime_directory} (override install \u2014 see runtime_spec_override)` : `Override runtime directory is stale or empty (${sidecar.runtime_directory}) \u2014 the CLI or package versions are missing.`,
-      ...matches ? {} : { repair: `Run: ${RERUN} --doctor --repair${runtimeFlagFor(input.runtime)} with the same HAVEN_*_SPEC variables set.` }
+      ...matches ? {} : { repair: repairCommandFor(input.runtime, " with the same HAVEN_*_SPEC variables set.") }
     });
   } else {
     const intact = await installedRuntimeMatchesVersions(sidecar.runtime_directory, sidecar.cli_path, {
@@ -4036,7 +4040,7 @@ async function verdictsForAgent(entry, input, deps) {
       label: "Signer runtime (preinstalled wrapper)",
       level: ok ? "ok" : intact ? "advisory" : "failed",
       detail: ok ? `Installed ${sidecar.signer_package}@${sidecar.signer_version} at ${sidecar.runtime_directory}` : intact ? `Installed version ${sidecar.signer_version} does not match the connector's pinned ${MCP_RUNTIME_MANIFEST.signerVersion} \u2014 intact, but outdated.` : `Runtime directory is stale or empty (${sidecar.runtime_directory}) \u2014 the CLI or package versions are missing.`,
-      ...ok ? {} : { repair: `Run: ${RERUN} --doctor --repair${runtimeFlagFor(input.runtime)}` }
+      ...ok ? {} : { repair: repairCommandFor(input.runtime) }
     });
   }
   const overrideCheck = await runtimeSpecOverrideCheck(directory, sidecar, deps.env ?? process.env);
@@ -4129,7 +4133,7 @@ async function verdictsForAgent(entry, input, deps) {
         label: "Signer stdio handshake",
         level: probe.status === "ok" ? "ok" : "failed",
         detail: probe.status === "ok" ? `Signer started, listed ${probe.toolNames?.length ?? 0} tools${probe.serverInfo?.version ? ` (v${probe.serverInfo.version})` : ""}.${compatDetail}` : `Handshake failed: ${probe.status}.`,
-        ...probe.status === "ok" ? {} : { repair: `Run: ${RERUN} --doctor --repair${runtimeFlagFor(input.runtime)}` }
+        ...probe.status === "ok" ? {} : { repair: repairCommandFor(input.runtime) }
       });
     }
   } else {
@@ -4138,7 +4142,7 @@ async function verdictsForAgent(entry, input, deps) {
       label: "Signer stdio handshake",
       level: "failed",
       detail: "Skipped \u2014 no prepared signer runtime to probe.",
-      repair: `Run: ${RERUN} --doctor --repair${runtimeFlagFor(input.runtime)}`
+      repair: repairCommandFor(input.runtime)
     });
   }
   return { checks, ...signerCapabilities ? { signerCapabilities } : {} };
@@ -4274,7 +4278,7 @@ async function runDoctor(input, deps = {}) {
       label: "Runtime MCP config",
       level: "failed",
       detail: `No runtime config at ${configPath}.`,
-      repair: `Run: ${RERUN} --doctor --repair${runtimeFlagFor(input2.runtime)}`
+      repair: repairCommandFor(input2.runtime)
     });
   } else {
     const primaryIdentity = await readIdentity(primaryDirectory ?? "");
@@ -4288,7 +4292,7 @@ async function runDoctor(input, deps = {}) {
       label: "Runtime MCP config",
       level: ok ? "ok" : "failed",
       detail: ok ? `Config at ${configPath} references the hosted server and the prepared signer wrapper.` : signerViaNpx ? `Config at ${configPath} still launches the signer via npx \u2014 the pre-#1586 shape that cannot start under a 120s startup timeout.` : `Config at ${configPath} is missing the Haven entries${primarySidecar && !wrapperReferenced ? " (or references a different signer wrapper)" : ""}.`,
-      ...ok ? {} : { repair: `Run: ${RERUN} --doctor --repair${runtimeFlagFor(input2.runtime)}` }
+      ...ok ? {} : { repair: repairCommandFor(input2.runtime) }
     });
   }
   for (const id of ["hosted_mcp", "identity_match", "rekey_pending"]) {
@@ -4400,7 +4404,13 @@ async function runDoctor(input, deps = {}) {
       repair: `Run: ${RERUN} --prune-signer-runtimes (add --dry-run to list only).`
     });
   }
-  const restart = restartRequiredForRuntime(input2.runtime, deps.env);
+  if (resolution.origin === "record") {
+    const rc = checks.find((check) => check.id === "runtime_config");
+    if (rc) {
+      rc.detail += ` (Resolved '${resolution.runtime}' from ${path.join(directory ?? "", CONNECT_OUTCOME_FILENAME)}; pass --runtime to check a different one.)`;
+    }
+  }
+  const restart = normalizedRuntime === null ? false : restartRequiredForRuntime(input2.runtime, deps.env);
   checks.push({
     id: "restart",
     label: "Runtime restart",
@@ -4820,7 +4830,7 @@ async function pathExists2(path) {
 init_unwire();
 init_local_mcp_runtime();
 init_runtime_manifest();
-var CONNECTOR_VERSION = "0.0.0-dev.202609200127.a29d546";
+var CONNECTOR_VERSION = "0.0.0-dev.202609230656.9b1d80a";
 var CONNECT_OUTCOME_SCHEMA_VERSION = 1;
 var failureOutcomesByError = /* @__PURE__ */ new WeakMap();
 function failureOutcomeFor(runtimeHint, error) {
@@ -5761,8 +5771,10 @@ function parseArgs(argv, env = process.env) {
     return { options, help, json, doctor, repair, tombstone, rekey, unwire, unwireDir };
   }
   if (doctor || repair) {
-    if (!options.runtime) {
-      throw new Error("--doctor/--repair need --runtime <runtime> (which config to examine).");
+    if (repair && !options.runtime?.trim()) {
+      throw new Error(
+        "--repair needs --runtime <runtime>: it rewrites that runtime's config, so the runtime is named explicitly rather than inherited from the setup record. --doctor alone resolves it from the record."
+      );
     }
     return { options, help, json, doctor, repair, tombstone, rekey };
   }
@@ -5813,9 +5825,12 @@ function helpText() {
     "  --json                     Emit one versioned, secret-free result object on stdout; progress stays on stderr.",
     "  --doctor                   Diagnose an existing setup (read-only, no token): config, credentials,",
     "                             signer runtime, hosted MCP, and a live signer handshake. Exits non-zero only on a failed check; an advisory (!) exits 0.",
+    "                             --runtime is optional: without it the doctor checks the runtime the setup recorded,",
+    "                             and reports a failure (not a pass) when no record names one.",
     "  --repair                   Repair, then re-diagnose (implies --doctor): reinstall the pinned signer",
     "                             runtime, rewrite the wrapper and runtime config from stored credentials.",
     "                             Hosted topology only (refuses to touch a --local config). No keys, no token.",
+    "                             Requires --runtime <runtime>: it rewrites that config, so the runtime is never inherited.",
     "  --rekey                    Replace this agent's signing key (no token). Generates a fresh keypair HERE and",
     "                             prints its public address to paste into the Haven agent page. Nothing changes",
     "                             until you finish; the agent keeps working on its old key throughout.",