@haven_ai/connect 0.1.17-alpha.0 → 0.1.19-alpha.0

package/dist/index.d.cts

@@ -264,7 +264,7 @@ declare function runtimeInstallCapabilities(runtime: string | undefined, env?: N
     restartRequired: boolean;
 };
 
-declare const CONNECTOR_VERSION = "0.1.17-alpha.0";
+declare const CONNECTOR_VERSION = "0.1.19-alpha.0";
 interface ConnectOptions {
     setupToken: string;
     apiBaseUrl: string;
@@ -284,6 +284,8 @@ interface ConnectDeps {
     writeCredentials?: typeof writeCredentialFiles;
     installRuntime?: typeof installRuntime;
     log?: (message: string) => void;
+    /** Overridable so the Node-floor refusal is testable without spawning a Node. */
+    nodeVersion?: string;
 }
 interface ConnectResult {
     setupId: string;
@@ -305,12 +307,12 @@ declare function shortAddress(address: string): string;
 
 declare const MCP_RUNTIME_MANIFEST: {
     readonly mcpPackage: "@haven_ai/mcp";
-    readonly mcpVersion: "0.1.17-alpha.0";
+    readonly mcpVersion: "0.1.19-alpha.0";
     readonly sdkPackage: "@haven_ai/sdk";
-    readonly sdkVersion: "0.1.17-alpha.0";
+    readonly sdkVersion: "0.1.19-alpha.0";
     readonly signerPackage: "@haven_ai/signer";
-    readonly signerVersion: "0.1.17-alpha.0";
-    readonly minimumNodeVersion: "20.0.0";
+    readonly signerVersion: "0.1.19-alpha.0";
+    readonly minimumNodeVersion: "24.0.0";
     readonly supportedClients: readonly ["codex-cli", "codex-desktop", "claude-code"];
     readonly requiredTools: readonly string[];
 };

package/dist/index.d.ts

@@ -264,7 +264,7 @@ declare function runtimeInstallCapabilities(runtime: string | undefined, env?: N
     restartRequired: boolean;
 };
 
-declare const CONNECTOR_VERSION = "0.1.17-alpha.0";
+declare const CONNECTOR_VERSION = "0.1.19-alpha.0";
 interface ConnectOptions {
     setupToken: string;
     apiBaseUrl: string;
@@ -284,6 +284,8 @@ interface ConnectDeps {
     writeCredentials?: typeof writeCredentialFiles;
     installRuntime?: typeof installRuntime;
     log?: (message: string) => void;
+    /** Overridable so the Node-floor refusal is testable without spawning a Node. */
+    nodeVersion?: string;
 }
 interface ConnectResult {
     setupId: string;
@@ -305,12 +307,12 @@ declare function shortAddress(address: string): string;
 
 declare const MCP_RUNTIME_MANIFEST: {
     readonly mcpPackage: "@haven_ai/mcp";
-    readonly mcpVersion: "0.1.17-alpha.0";
+    readonly mcpVersion: "0.1.19-alpha.0";
     readonly sdkPackage: "@haven_ai/sdk";
-    readonly sdkVersion: "0.1.17-alpha.0";
+    readonly sdkVersion: "0.1.19-alpha.0";
     readonly signerPackage: "@haven_ai/signer";
-    readonly signerVersion: "0.1.17-alpha.0";
-    readonly minimumNodeVersion: "20.0.0";
+    readonly signerVersion: "0.1.19-alpha.0";
+    readonly minimumNodeVersion: "24.0.0";
     readonly supportedClients: readonly ["codex-cli", "codex-desktop", "claude-code"];
     readonly requiredTools: readonly string[];
 };

package/dist/index.js

@@ -6,7 +6,7 @@ import { join, resolve, dirname } from 'path';
 import { execFile, spawn } from 'child_process';
 import { promisify } from 'util';
 import { registeredToolNames, MCP_VERSION, ensureConsent, computeConsentHash, loadCredentials, consentInputFromClient } from '@haven_ai/mcp';
-import { SKILL_FOLDER_NAME, HAVEN_SKILL_MD } from '@haven_ai/sdk';
+import { HAVEN_MINIMUM_NODE_VERSION, SKILL_FOLDER_NAME, HAVEN_SKILL_MD, isSupportedNodeVersion, unsupportedNodeVersionMessage } from '@haven_ai/sdk';
 import { ensureSignerConsent, computeSignerConsentHash, loadSignerCredentials, createEdgeSigner, toolSchemas } from '@haven_ai/signer';
 
 // src/api.ts
@@ -229,10 +229,16 @@ var MCP_RUNTIME_MANIFEST = {
   mcpPackage: "@haven_ai/mcp",
   mcpVersion: MCP_VERSION,
   sdkPackage: "@haven_ai/sdk",
-  sdkVersion: "0.1.17-alpha.0",
+  sdkVersion: "0.1.19-alpha.0",
   signerPackage: "@haven_ai/signer",
-  signerVersion: "0.1.17-alpha.0",
-  minimumNodeVersion: "20.0.0",
+  signerVersion: "0.1.19-alpha.0",
+  // Sourced from the SDK, never a literal (#1161). This field read '20.0.0'
+  // while every package's `engines` said `>=24` and the docs said `>=24.0.0`,
+  // so the guard that was supposed to enforce the floor waved Node v23 through
+  // — including on the `--local` path where it does run. A hand-maintained
+  // second copy of a number is a drift waiting to happen; a guard test pins
+  // this against `package.json`'s `engines.node`.
+  minimumNodeVersion: HAVEN_MINIMUM_NODE_VERSION,
   supportedClients: ["codex-cli", "codex-desktop", "claude-code"],
   requiredTools: registeredToolNames()
 };
@@ -906,9 +912,13 @@ async function fetchWithTimeout(fetchImpl, url, init) {
 var execFileAsync = promisify(execFile);
 var UnsupportedNodeVersionError = class extends Error {
   code = "local_mcp_unsupported_node_version";
-  constructor(nodeVersion, minimumNodeVersion) {
-    super(`Node.js ${nodeVersion} is not supported. Haven local MCP requires Node.js >=${minimumNodeVersion}.`);
+  nodeVersion;
+  minimumNodeVersion;
+  constructor(nodeVersion, minimumNodeVersion, subject = "Haven setup") {
+    super(unsupportedNodeVersionMessage({ subject, nodeVersion, minimumNodeVersion }));
     this.name = "UnsupportedNodeVersionError";
+    this.nodeVersion = nodeVersion;
+    this.minimumNodeVersion = minimumNodeVersion;
   }
 };
 async function prepareLocalMcpRuntime(input, deps = {}) {
@@ -954,28 +964,11 @@ async function prepareLocalMcpRuntime(input, deps = {}) {
     messages
   };
 }
-function assertSupportedNodeVersion(nodeVersion = process.versions.node, minimumNodeVersion = MCP_RUNTIME_MANIFEST.minimumNodeVersion) {
-  if (compareNodeVersions(nodeVersion, minimumNodeVersion) < 0) {
-    throw new UnsupportedNodeVersionError(nodeVersion, minimumNodeVersion);
+function assertSupportedNodeVersion(nodeVersion = process.versions.node, minimumNodeVersion = MCP_RUNTIME_MANIFEST.minimumNodeVersion, subject = "Haven setup") {
+  if (!isSupportedNodeVersion(nodeVersion, minimumNodeVersion)) {
+    throw new UnsupportedNodeVersionError(nodeVersion, minimumNodeVersion, subject);
   }
 }
-function compareNodeVersions(left, right) {
-  const leftParts = parseNodeVersion(left);
-  const rightParts = parseNodeVersion(right);
-  for (let i = 0; i < 3; i += 1) {
-    if (leftParts[i] !== rightParts[i]) return leftParts[i] > rightParts[i] ? 1 : -1;
-  }
-  return 0;
-}
-function parseNodeVersion(value) {
-  const match = value.trim().match(/^v?(\d+)(?:\.(\d+))?(?:\.(\d+))?/);
-  if (!match) return [0, 0, 0];
-  return [
-    Number(match[1] ?? 0),
-    Number(match[2] ?? 0),
-    Number(match[3] ?? 0)
-  ];
-}
 async function installRuntimePackages(runtimeDirectory, npmCacheDirectory, runCommand) {
   const baseArgs = [
     "install",
@@ -1399,7 +1392,12 @@ async function installRuntime(input, deps = {}) {
       localMcpAcknowledged: false,
       messages: [
         ...consentMessages,
-        "Runtime was not recognized. Keep the local credentials and add Haven MCP entries manually after wallet approval."
+        "Custom runtime: Haven did not auto-configure it. Your credentials are on disk (chmod 600) \u2014 read them at runtime; never paste a key into the agent prompt, memory, or logs.",
+        `  identity (hosted MCP Bearer): ${input.identityPath}`,
+        `  signer (local signing key):   ${input.signerPath}`,
+        "After wallet approval, wire the runtime to Haven by reference:",
+        `  Hosted MCP + local signer: point your MCP client at ${input.hostedMcpUrl} with the api_key from identity.json, then run  npx -y ${signerPackageSpec()} --credentials ${input.signerPath}`,
+        `  Fully local MCP (no hosted dependency):  npx -y ${mcpPackageSpec()} --identity ${input.identityPath} --signer ${input.signerPath}`
       ]
     };
   }
@@ -1703,8 +1701,9 @@ function localRuntimePrepareErrorCode(err) {
 }
 
 // src/runtime.ts
-var CONNECTOR_VERSION = "0.1.17-alpha.0";
+var CONNECTOR_VERSION = "0.1.19-alpha.0";
 async function runConnect(options, deps = {}) {
+  assertSupportedNodeVersion(deps.nodeVersion, MCP_RUNTIME_MANIFEST.minimumNodeVersion);
   const connectorVersion = options.connectorVersion ?? CONNECTOR_VERSION;
   const api = deps.api ?? createConnectApiClient(options.apiBaseUrl);
   const log = secureLogger(deps.log ?? ((message) => process.stdout.write(`${message}