@haven_ai/connect 0.1.17-alpha.0 → 0.1.19-alpha.0

package/dist/cli.js

@@ -7,7 +7,7 @@ import { join, resolve, dirname } from 'path';
 import { execFile, spawn } from 'child_process';
 import { promisify } from 'util';
 import { registeredToolNames, MCP_VERSION, ensureConsent, computeConsentHash, loadCredentials, consentInputFromClient } from '@haven_ai/mcp';
-import { SKILL_FOLDER_NAME, HAVEN_SKILL_MD } from '@haven_ai/sdk';
+import { HAVEN_MINIMUM_NODE_VERSION, isSupportedNodeVersion, unsupportedNodeVersionMessage, SKILL_FOLDER_NAME, HAVEN_SKILL_MD } from '@haven_ai/sdk';
 import { ensureSignerConsent, computeSignerConsentHash, loadSignerCredentials, createEdgeSigner, toolSchemas } from '@haven_ai/signer';
 
 // src/api.ts
@@ -230,10 +230,16 @@ var MCP_RUNTIME_MANIFEST = {
   mcpPackage: "@haven_ai/mcp",
   mcpVersion: MCP_VERSION,
   sdkPackage: "@haven_ai/sdk",
-  sdkVersion: "0.1.17-alpha.0",
+  sdkVersion: "0.1.19-alpha.0",
   signerPackage: "@haven_ai/signer",
-  signerVersion: "0.1.17-alpha.0",
-  minimumNodeVersion: "20.0.0",
+  signerVersion: "0.1.19-alpha.0",
+  // Sourced from the SDK, never a literal (#1161). This field read '20.0.0'
+  // while every package's `engines` said `>=24` and the docs said `>=24.0.0`,
+  // so the guard that was supposed to enforce the floor waved Node v23 through
+  // — including on the `--local` path where it does run. A hand-maintained
+  // second copy of a number is a drift waiting to happen; a guard test pins
+  // this against `package.json`'s `engines.node`.
+  minimumNodeVersion: HAVEN_MINIMUM_NODE_VERSION,
   supportedClients: ["codex-cli", "codex-desktop", "claude-code"],
   requiredTools: registeredToolNames()
 };
@@ -907,9 +913,13 @@ async function fetchWithTimeout(fetchImpl, url, init) {
 var execFileAsync = promisify(execFile);
 var UnsupportedNodeVersionError = class extends Error {
   code = "local_mcp_unsupported_node_version";
-  constructor(nodeVersion, minimumNodeVersion) {
-    super(`Node.js ${nodeVersion} is not supported. Haven local MCP requires Node.js >=${minimumNodeVersion}.`);
+  nodeVersion;
+  minimumNodeVersion;
+  constructor(nodeVersion, minimumNodeVersion, subject = "Haven setup") {
+    super(unsupportedNodeVersionMessage({ subject, nodeVersion, minimumNodeVersion }));
     this.name = "UnsupportedNodeVersionError";
+    this.nodeVersion = nodeVersion;
+    this.minimumNodeVersion = minimumNodeVersion;
   }
 };
 async function prepareLocalMcpRuntime(input, deps = {}) {
@@ -955,28 +965,11 @@ async function prepareLocalMcpRuntime(input, deps = {}) {
     messages
   };
 }
-function assertSupportedNodeVersion(nodeVersion = process.versions.node, minimumNodeVersion = MCP_RUNTIME_MANIFEST.minimumNodeVersion) {
-  if (compareNodeVersions(nodeVersion, minimumNodeVersion) < 0) {
-    throw new UnsupportedNodeVersionError(nodeVersion, minimumNodeVersion);
+function assertSupportedNodeVersion(nodeVersion = process.versions.node, minimumNodeVersion = MCP_RUNTIME_MANIFEST.minimumNodeVersion, subject = "Haven setup") {
+  if (!isSupportedNodeVersion(nodeVersion, minimumNodeVersion)) {
+    throw new UnsupportedNodeVersionError(nodeVersion, minimumNodeVersion, subject);
   }
 }
-function compareNodeVersions(left, right) {
-  const leftParts = parseNodeVersion(left);
-  const rightParts = parseNodeVersion(right);
-  for (let i = 0; i < 3; i += 1) {
-    if (leftParts[i] !== rightParts[i]) return leftParts[i] > rightParts[i] ? 1 : -1;
-  }
-  return 0;
-}
-function parseNodeVersion(value) {
-  const match = value.trim().match(/^v?(\d+)(?:\.(\d+))?(?:\.(\d+))?/);
-  if (!match) return [0, 0, 0];
-  return [
-    Number(match[1] ?? 0),
-    Number(match[2] ?? 0),
-    Number(match[3] ?? 0)
-  ];
-}
 async function installRuntimePackages(runtimeDirectory, npmCacheDirectory, runCommand) {
   const baseArgs = [
     "install",
@@ -1400,7 +1393,12 @@ async function installRuntime(input, deps = {}) {
       localMcpAcknowledged: false,
       messages: [
         ...consentMessages,
-        "Runtime was not recognized. Keep the local credentials and add Haven MCP entries manually after wallet approval."
+        "Custom runtime: Haven did not auto-configure it. Your credentials are on disk (chmod 600) \u2014 read them at runtime; never paste a key into the agent prompt, memory, or logs.",
+        `  identity (hosted MCP Bearer): ${input.identityPath}`,
+        `  signer (local signing key):   ${input.signerPath}`,
+        "After wallet approval, wire the runtime to Haven by reference:",
+        `  Hosted MCP + local signer: point your MCP client at ${input.hostedMcpUrl} with the api_key from identity.json, then run  npx -y ${signerPackageSpec()} --credentials ${input.signerPath}`,
+        `  Fully local MCP (no hosted dependency):  npx -y ${mcpPackageSpec()} --identity ${input.identityPath} --signer ${input.signerPath}`
       ]
     };
   }
@@ -1704,8 +1702,9 @@ function localRuntimePrepareErrorCode(err) {
 }
 
 // src/runtime.ts
-var CONNECTOR_VERSION = "0.1.17-alpha.0";
+var CONNECTOR_VERSION = "0.1.19-alpha.0";
 async function runConnect(options, deps = {}) {
+  assertSupportedNodeVersion(deps.nodeVersion, MCP_RUNTIME_MANIFEST.minimumNodeVersion);
   const connectorVersion = options.connectorVersion ?? CONNECTOR_VERSION;
   const api = deps.api ?? createConnectApiClient(options.apiBaseUrl);
   const log = secureLogger(deps.log ?? ((message) => process.stdout.write(`${message}