@haven_ai/connect 0.0.0-dev.202610091522.ece043a → 0.0.0-dev.202610091612.d805017

package/README.md

@@ -144,7 +144,7 @@ report stays `version: 1`; `level` is additive.
 | Level | Meaning | Example |
 | --- | --- | --- |
 | `ok` | Nothing to say. | The installed signer matches the connector's pin. |
-| `advisory` | Worth reading; nothing is broken. Exit 0. | `signer_runtime`: the install is intact but behind the pinned version ("intact, but outdated" — both versions named, `--repair` offered); `signer_runtime_unused` (#3123): runtime directories nothing references; `mcp_server_name_rebound` (#3122): two local binding records claim one server name. `superseded_agents` on a recognised runtime with no config file the connector can read (Claude Code, `other`): a second live key is reported, and the check says why "wired" cannot be verified from this machine. |
+| `advisory` | Worth reading; nothing is broken. Exit 0. | `signer_runtime`: the install is intact but behind the pinned version ("intact, but outdated" — both versions named, `--repair` offered); `signer_runtime_unused` (#3123): runtime directories nothing references; `mcp_server_name_rebound` (#3122): two local binding records claim one server name. `superseded_agents` on a recognised runtime with no config file the connector can read (Claude Code, `other`): a second live key is reported, and the check — labelled "Other agent credentials (wiring not verifiable)" — says why "wired" cannot be verified from this machine. On Claude Code a pair named in `~/.claude.json` counts as wired (#3830), so only directories that file does not name reach this advisory, and the inventory row reads "not verified as wired" rather than "superseded"; a directory it upgrades runs the full per-agent checks and can fail the run. |
 | `failed` | A real failure with one repair action. Exit 1. | A stale or empty runtime directory; a live key in a directory the runtime's config demonstrably does not use. |
 
 What stays blocking is live spend authority: a directory whose stored key
@@ -320,10 +320,10 @@ long-lived host afterwards, as with any retirement.
 
 Setup guards the **name slot** (a taken `--name`, the bare pair already wired
 — #2551 refuses or asks) but never the **wallet**: a machine can carry several
-agents with live keys, and until #3122 the "your previous agent(s) still exist
-with their own keys" heads-up was printed only after the credentials were
-written (that completion heads-up, #1688, is unchanged — this slice ADDS an
-earlier notice). Two things changed, both from local files only (no network call is
+agents with live keys, and until #3122 the heads-up naming the other agent
+directories was printed only after the credentials were written (that
+completion heads-up, #1688, still prints — reworded by #3830, see below — and
+this slice ADDS an earlier notice). Two things changed, both from local files only (no network call is
 added; the backend is not asked whether any key still authenticates):
 
 - **Before the key is minted or anything is written**, setup names every
@@ -418,21 +418,29 @@ deployment, so the two differing is intended topology, not an environment
 mismatch. It is non-secret: the same string goes into your own MCP config file,
 and the API key travels beside it in a header.
 
-`superseded_agent_ids` lists the other agent directories on this machine. A
-re-run mints a NEW agent, and without `--replace` retires nothing, so those
-older agents still hold live API and signing keys — use **Remove agent…** on the
-Haven agent page for each if you meant to replace them. Empty on a clean first run; an empty
-list here is not a guarantee, since a scan that cannot read the credential root
-also yields one rather than failing a completed setup.
-
-**The dashboard offers the revoke, never the connector (#2561).** The same ids
-now ride the install-status report, so the Haven dashboard can put a
-revoke next to the setup that displaced them; it also ends the agent's budget
-with one owner signature (#3542). The connector does not
-and must not do it: `POST /agents/:id/revoke` is owner-authenticated, and an
-agent credential retiring a sibling agent is the "agent editing its own
-authority" the re-key routes refuse. Nothing is revoked automatically — the
-owner clicks, one agent at a time.
+`superseded_agent_ids` lists the other agent directories on this machine —
+every one, key-less and tombstoned included, on any backend. Despite the field
+name it is **not** a replace set (#3830): since named pairs became the default
+(#3737), a run without `--replace` adds its agent alongside the ones already
+here and retires nothing, so most listed agents are simply other agents, many
+of them wired and in use. Agents a `--replace` run actually retired are
+`retired_agent_ids`. The completion heads-up names the list as "other agent
+directories on this machine" and says this setup revoked none of them; if you
+no longer use one, use **Remove agent…** on its Haven agent page. Empty on a
+clean first run; an empty list here is not a guarantee, since a scan that
+cannot read the credential root also yields one rather than failing a
+completed setup.
+
+**The dashboard lists them; revoking stays on each agent's page (#2561,
+#3830).** The same ids ride the install-status report, and the connect modal's
+completed state lists those that are the owner's agents and not revoked
+(active, paused or still in setup), each linking to its agent page. It
+does not call them replaced and offers no revoke there (owner decision,
+2026-10-09): the report cannot tell a coexisting agent
+from a retired one. The connector never revokes either: `POST
+/agents/:id/revoke` is owner-authenticated, and an agent credential retiring a
+sibling agent is the "agent editing its own authority" the re-key routes
+refuse.
 
 On the REPORT the field is a tri-state, unlike the `--json` outcome above: a
 list, `[]` when the scan ran and found none, and `null` when it could not run.
@@ -753,7 +761,8 @@ repair spelled out: use **Remove agent…** on the Haven agent page, then remove
 the directory. An already-revoked one reports as informational; an unreachable
 probe is a note, never a verdict. Connect never revokes or deletes
 credentials itself — it reports, you decide. The setup completion output
-names superseded agents the moment they are created, for the same reason.
+names the other agent directories the moment the new agent is created, for
+the same reason.
 One honest limit: "newest" is decided by file mtime, so a restored backup or
 a sync tool that rewrites timestamps can make doctor examine the wrong
 directory as current — before revoking anything, confirm the agent id

package/dist/cli.cjs

@@ -257,9 +257,9 @@ var init_runtime_manifest = __esm({
       mcpPackage: "@haven_ai/mcp",
       mcpVersion: mcp.MCP_VERSION,
       sdkPackage: "@haven_ai/sdk",
-      sdkVersion: "0.0.0-dev.202610091522.ece043a",
+      sdkVersion: "0.0.0-dev.202610091612.d805017",
       signerPackage: "@haven_ai/signer",
-      signerVersion: "0.0.0-dev.202610091522.ece043a",
+      signerVersion: "0.0.0-dev.202610091612.d805017",
       // Sourced from the SDK, never a literal (#1161). This field read '20.0.0'
       // while every package's `engines` said `>=24` and the docs said `>=24.0.0`,
       // so the guard that was supposed to enforce the floor waved Node v23 through
@@ -4179,10 +4179,10 @@ async function executeConnect(options, deps, trace) {
     } else if (supersededAgentIds.length > 0) {
       log("");
       log(
-        `Heads-up: this setup created a NEW agent. Your previous agent(s) \u2014 ${supersededAgentIds.join(", ")} \u2014 still exist with their own keys, and any host that was already running keeps acting as them.`
+        `Heads-up: other agent directories on this machine \u2014 ${supersededAgentIds.join(", ")}. This setup created a NEW agent and revoked none of them; any not revoked in Haven keep their own keys and any budgets.`
       );
       log(
-        `If you meant to replace them: use Remove agent\u2026 on the Haven agent page for each (it ends their live budgets), then restart EVERY long-lived host (gateways, TUI workers, editors) \u2014 each holds the MCP wiring snapshot from its own start time, so after repeated setups each can be stuck on a DIFFERENT old agent. Then remove their directories under ~/.haven/agents (or ${RERUN_HINT} --tombstone <dir> to leave a diagnostic in their place). Run ${RERUN_HINT} --doctor to check whether their keys are still live.`
+        `To retire one you no longer use: use Remove agent\u2026 on its Haven agent page (it ends its live budget), restart any long-lived host (gateways, TUI workers, editors) still wired to it \u2014 each holds the MCP wiring snapshot from its own start time \u2014 and remove its directory under ~/.haven/agents (or ${RERUN_HINT} --tombstone <dir> to leave a diagnostic in its place). To rewire the bare haven / haven-signer pair instead of adding an agent, re-run with --replace. Run ${RERUN_HINT} --doctor to check which keys are still live.`
       );
     }
   } catch {
@@ -4672,7 +4672,7 @@ var init_runtime = __esm({
     init_tombstone();
     init_local_mcp_runtime();
     init_runtime_manifest();
-    CONNECTOR_VERSION = "0.0.0-dev.202610091522.ece043a";
+    CONNECTOR_VERSION = "0.0.0-dev.202610091612.d805017";
     PRODUCTION_CHAIN_ID = 8453;
     CONNECTOR_CLIENT_IDENTITY = `@haven_ai/connect/${CONNECTOR_VERSION}`;
     CONNECT_OUTCOME_SCHEMA_VERSION = 1;
@@ -5269,6 +5269,35 @@ async function discoverCredentialDirectory(homeDir, explicit) {
     identityDirectories
   };
 }
+async function readClaudeCodeWiringEvidence(homeDir) {
+  let parsed;
+  try {
+    parsed = JSON.parse(await promises.readFile(path.join(homeDir, ".claude.json"), "utf8"));
+  } catch {
+    return null;
+  }
+  if (typeof parsed !== "object" || parsed === null) return null;
+  const blocks = [parsed.mcpServers];
+  const projects = parsed.projects;
+  if (typeof projects === "object" && projects !== null) {
+    for (const project of Object.values(projects)) {
+      if (typeof project === "object" && project !== null) blocks.push(project.mcpServers);
+    }
+  }
+  const lines = [];
+  for (const block of blocks) {
+    if (typeof block !== "object" || block === null) continue;
+    for (const [name, server] of Object.entries(block)) {
+      const entry = typeof server === "object" && server !== null ? server : {};
+      const parts = [JSON.stringify(name) + ":"];
+      if (typeof entry.command === "string") parts.push(entry.command);
+      if (Array.isArray(entry.args)) parts.push(...entry.args.filter((arg) => typeof arg === "string"));
+      if (typeof entry.url === "string") parts.push(entry.url);
+      lines.push(parts.join(" "));
+    }
+  }
+  return lines.length > 0 ? lines.join("\n") : null;
+}
 function agentIsWired(configText, names, slug, identity, sidecar, isPrimary, bareOwnerExists) {
   if (configText === null) return isPrimary;
   if (slug) {
@@ -5577,6 +5606,7 @@ async function runDoctor(input, deps = {}) {
       configText = null;
     }
   }
+  const claudeCodeWiring = configText === null && normalizedRuntime === "claude-code" ? await readClaudeCodeWiringEvidence(homeDir) : null;
   const allDirectories = directory ? [directory, ...others] : others;
   let bareOwnerExists = false;
   for (const dir of allDirectories) {
@@ -5610,7 +5640,10 @@ async function runDoctor(input, deps = {}) {
       });
       continue;
     }
-    const wired = agentIsWired(configText, names, slug, identity, sidecar, dir === directory, bareOwnerExists);
+    const wired = agentIsWired(configText, names, slug, identity, sidecar, dir === directory, bareOwnerExists) || // Additive only: a name or wrapper path in ~/.claude.json proves this
+    // directory is wired; its absence proves nothing (#3830), so the
+    // fallback verdict above is never downgraded.
+    claudeCodeWiring !== null && agentIsWired(claudeCodeWiring, names, slug, identity, sidecar, false, false);
     const entry = {
       ...slug ? { slug } : {},
       ...identity.agent_id ? { agentId: identity.agent_id } : {},
@@ -5765,9 +5798,13 @@ async function runDoctor(input, deps = {}) {
     const supersededLevel = supersededLive.length === 0 ? "ok" : classificationUnreliable ? "advisory" : "failed";
     checks.push({
       id: "superseded_agents",
-      label: "Superseded agent credentials",
+      // #3830: an advisory means the connector could not tell wired from
+      // superseded, so its label must not assert "superseded" either. The
+      // inventory `classification` stays as is (#3121 decision 5); the label
+      // is what a person reads.
+      label: supersededLevel === "advisory" ? "Other agent credentials (wiring not verifiable)" : "Superseded agent credentials",
       level: supersededLevel,
-      detail: supersededLevel === "failed" ? `${otherEntries.length} other credential dir(s) found \u2014 ${parts.join("; ")}. A host started before your latest setup keeps authenticating (and spending) as the old agent.` : supersededLevel === "advisory" ? `${otherEntries.length} other credential dir(s) found \u2014 ${parts.join("; ")}. Runtime '${input2.runtime}' has no config file the connector can read, so which of these agents are wired cannot be verified from this machine: a live key here may be an agent you use deliberately, or one a host started before your latest setup is still spending as.` : `${otherEntries.length} other credential dir(s) found \u2014 ${parts.join("; ")}.`,
+      detail: supersededLevel === "failed" ? `${otherEntries.length} other credential dir(s) found \u2014 ${parts.join("; ")}. A host started before your latest setup keeps authenticating (and spending) as the old agent.` : supersededLevel === "advisory" ? `${otherEntries.length} other credential dir(s) found \u2014 ${parts.join("; ")}. Runtime '${input2.runtime}' has no config file the connector writes, and none it can read names these agents, so which of them are wired cannot be verified from this machine: a live key here may be an agent you use deliberately, or one a host started before your latest setup is still spending as.` : `${otherEntries.length} other credential dir(s) found \u2014 ${parts.join("; ")}.`,
       ...supersededLevel === "failed" ? {
         repair: `Use Remove agent\u2026 on the Haven agent page for ${supersededLive.join(", ")} (it ends each one\u2019s live budgets), then remove the old director(y/ies) under ~/.haven/agents. Connect never revokes or deletes for you.`
       } : supersededLevel === "advisory" ? {
@@ -6668,13 +6705,16 @@ async function runCli(argv, io = {
 `));
         }
         const otherAgents = report.agents.filter((agent) => agent.directory !== report.credentialDirectory);
+        const wiringUnverifiable = report.checks.some(
+          (check) => check.id === "superseded_agents" && check.level === "advisory"
+        );
         if (otherAgents.length > 0) {
           io.stdout("\nOther agents on this machine:\n");
           for (const agent of otherAgents) {
             const name = agent.slug ? `${agent.slug} (${agent.agentId ?? "unknown"})` : agent.agentId ?? "unknown";
             const failed = agent.checks.filter((check) => check.level === "failed");
             const advised = agent.checks.filter((check) => check.level === "advisory");
-            const verdict = agent.classification === "wired" ? failed.length > 0 ? `wired, ${failed.length} check(s) FAILED` : advised.length > 0 ? `wired, ${advised.length} advisory finding(s)` : "wired, all checks passed" : agent.classification === "parked" ? "parked re-key only \u2014 no identity.json in this directory, but key material is still there" : agent.classification;
+            const verdict = agent.classification === "wired" ? failed.length > 0 ? `wired, ${failed.length} check(s) FAILED` : advised.length > 0 ? `wired, ${advised.length} advisory finding(s)` : "wired, all checks passed" : agent.classification === "parked" ? "parked re-key only \u2014 no identity.json in this directory, but key material is still there" : agent.classification === "superseded" && wiringUnverifiable ? "not verified as wired \u2014 no config the connector can read names it" : agent.classification;
             io.stdout(redactSecrets(`  ${failed.length > 0 ? "\u2717" : advised.length > 0 ? "!" : "\u2022"} ${name}: ${verdict}
 `));
             for (const check of [...failed, ...advised]) {