@haven_ai/connect 0.1.22-alpha.0 → 0.1.23-alpha.1

package/dist/index.d.cts

@@ -1,7 +1,26 @@
+export { CliIo, runCli } from './cli.cjs';
+
 interface ConnectApiClient {
     resolveSetup(input: ResolveSetupInput): Promise<ResolvedSetup>;
     registerSetup(input: RegisterSetupInput): Promise<RegisterSetupResponse>;
     updateInstallStatus(setupId: string, apiKey: string, input: UpdateInstallStatusInput): Promise<void>;
+    /**
+     * #1377 D: the narrow status read the connector polls after registering,
+     * authenticated with the agent API key it just minted (works while the
+     * agent is still `setup_pending` — the endpoint exists for exactly that
+     * window). Returns status plus the approved budget once approval lands;
+     * never any secret material.
+     */
+    getConnectorStatus(setupId: string, apiKey: string): Promise<ConnectorStatusResponse>;
+}
+interface ConnectorStatusResponse {
+    status: string;
+    approved_budget: {
+        token_symbol: string;
+        token_address: string;
+        amount: string;
+        reset_period_min: number;
+    } | null;
 }
 interface ResolveSetupInput {
     setupToken: string;
@@ -133,6 +152,8 @@ interface RuntimeProfile {
     label: string;
     restartMode: RestartMode;
     canWriteRuntimeConfig: boolean;
+    /** Precise, runtime-owned instruction for loading a freshly written MCP entry. */
+    activationInstruction: string;
 }
 declare function runtimeProfile(runtime: string | undefined, env?: NodeJS.ProcessEnv): RuntimeProfile;
 declare function normalizeRuntime(runtime: string | undefined, env?: NodeJS.ProcessEnv): RuntimeId;
@@ -264,7 +285,7 @@ declare function runtimeInstallCapabilities(runtime: string | undefined, env?: N
     restartRequired: boolean;
 };
 
-declare const CONNECTOR_VERSION = "0.1.22-alpha.0";
+declare const CONNECTOR_VERSION = "0.1.23-alpha.1";
 interface ConnectOptions {
     setupToken: string;
     apiBaseUrl: string;
@@ -275,6 +296,50 @@ interface ConnectOptions {
     ackSigner?: boolean;
     ackLocalTools?: boolean;
     localMcp?: boolean;
+    /**
+     * #1377 D: keep the process alive after registering and poll for the
+     * user's budget approval (default). Set false for structured/automation
+     * runs (--json) where prompt output emission matters more than narration.
+     */
+    waitForApproval?: boolean;
+    /** Test/injection overrides for the approval poll cadence and clock. */
+    approvalWait?: ApprovalWaitOptions;
+}
+/** The stable machine-readable result emitted by `haven-connect --json`. */
+declare const CONNECT_OUTCOME_SCHEMA_VERSION: 1;
+type ConnectOutcomeStatus = 'complete' | 'action_required' | 'failed';
+interface ConnectOutcome {
+    schema_version: typeof CONNECT_OUTCOME_SCHEMA_VERSION;
+    outcome: ConnectOutcomeStatus;
+    runtime: string;
+    topology: string;
+    configuration: {
+        hosted_mcp: boolean;
+        local_signer: boolean;
+        local_mcp: boolean;
+    };
+    probe: {
+        result: string;
+    };
+    activation: {
+        restart_required: boolean;
+        instruction: string;
+    };
+    next_action: string;
+    approval: {
+        required: boolean;
+        expires_at: string | null;
+    };
+    verification: {
+        tools: readonly ['haven_get_agent', 'haven_get_allowances'];
+        instruction: string;
+    };
+    delegate_address?: string;
+    setup_challenge_expires_at?: string;
+    error?: {
+        code: string;
+        next_action: string;
+    };
 }
 interface ConnectDeps {
     api?: ConnectApiClient;
@@ -284,6 +349,8 @@ interface ConnectDeps {
     writeCredentials?: typeof writeCredentialFiles;
     installRuntime?: typeof installRuntime;
     log?: (message: string) => void;
+    /** JSON CLI mode must not expose owner-only credential file locations. */
+    redactPaths?: boolean;
     /** Overridable so the Node-floor refusal is testable without spawning a Node. */
     nodeVersion?: string;
 }
@@ -292,12 +359,40 @@ interface ConnectResult {
     agentId: string;
     delegateAddress: string;
     credentialPaths: StoredCredentialPaths;
+    /** Additive, secret-free completion contract shared by library callers and --json. */
+    outcome: ConnectOutcome;
 }
 declare function runConnect(options: ConnectOptions, deps?: ConnectDeps): Promise<ConnectResult>;
+declare function completionOutcome(input: {
+    runtimeInstall: RuntimeInstallResult;
+    delegateAddress: string;
+    setupChallengeExpiresAt?: string;
+    approvalRequired: boolean;
+}): ConnectOutcome;
+/**
+ * A deliberately terse failure record: error messages can contain server or
+ * filesystem detail, while this public contract must remain safe to serialize.
+ */
+declare function failedConnectOutcome(runtimeHint: string | undefined, error: unknown): ConnectOutcome;
+/**
+ * #1377 D: after registering, the connector no longer goes dead while the
+ * user approves in Haven — it polls the narrow connector-status endpoint
+ * (agent-API-key auth, works during `setup_pending`) and narrates progress in
+ * the flow's voice, ending in a concrete celebration naming the granted
+ * authority. Bounds (stated per the issue): poll every 5 s, give up after
+ * 3 minutes — the connector ALWAYS terminates on its own; a timeout is a
+ * clean exit with guidance, never a hang. Injectable clock/cadence for tests.
+ */
+interface ApprovalWaitOptions {
+    intervalMs?: number;
+    timeoutMs?: number;
+    sleep?: (ms: number) => Promise<void>;
+}
 
 interface ParsedCli {
     options: ConnectOptions;
     help: boolean;
+    json: boolean;
 }
 declare function parseArgs(argv: string[], env?: NodeJS.ProcessEnv): ParsedCli;
 declare function helpText(): string;
@@ -307,12 +402,12 @@ declare function shortAddress(address: string): string;
 
 declare const MCP_RUNTIME_MANIFEST: {
     readonly mcpPackage: "@haven_ai/mcp";
-    readonly mcpVersion: "0.1.22-alpha.0";
+    readonly mcpVersion: "0.1.23-alpha.1";
     readonly sdkPackage: "@haven_ai/sdk";
-    readonly sdkVersion: "0.1.22-alpha.0";
+    readonly sdkVersion: "0.1.23-alpha.1";
     readonly signerPackage: "@haven_ai/signer";
-    readonly signerVersion: "0.1.22-alpha.0";
-    readonly minimumNodeVersion: "24.0.0";
+    readonly signerVersion: "0.1.23-alpha.1";
+    readonly minimumNodeVersion: "22.0.0";
     readonly supportedClients: readonly ["codex-cli", "codex-desktop", "claude-code"];
     readonly requiredTools: readonly string[];
 };
@@ -320,4 +415,4 @@ declare function mcpPackageSpec(): string;
 declare function sdkPackageSpec(): string;
 declare function signerPackageSpec(): string;
 
-export { CONNECTOR_VERSION, type ConnectApiClient, type ConnectDeps, type ConnectOptions, type ConnectResult, type LocalDelegateKey, MCP_RUNTIME_MANIFEST, type PrepareSignerRuntimeInput, type PreparedSignerRuntime, type RegisterSetupInput, type RegisterSetupResponse, type ResolveSetupInput, type ResolvedSetup, type RuntimeId, type RuntimeInstallInput, type RuntimeInstallResult, type RuntimeProfile, type StoredCredentialPaths, type UpdateInstallStatusInput, type WriteCredentialInput, createConnectApiClient, defaultAgentDirectory, delegateKeyFromPrivateKey, generateDelegateKey, helpText, installRuntime, mcpPackageSpec, normalizeRuntime, parseArgs, prepareSignerRuntime, redactSecrets, runConnect, runtimeInstallCapabilities, runtimeProfile, sdkPackageSpec, shortAddress, signerPackageSpec, writeCredentialFiles };
+export { CONNECTOR_VERSION, CONNECT_OUTCOME_SCHEMA_VERSION, type ConnectApiClient, type ConnectDeps, type ConnectOptions, type ConnectOutcome, type ConnectOutcomeStatus, type ConnectResult, type LocalDelegateKey, MCP_RUNTIME_MANIFEST, type ParsedCli, type PrepareSignerRuntimeInput, type PreparedSignerRuntime, type RegisterSetupInput, type RegisterSetupResponse, type ResolveSetupInput, type ResolvedSetup, type RuntimeId, type RuntimeInstallInput, type RuntimeInstallResult, type RuntimeProfile, type StoredCredentialPaths, type UpdateInstallStatusInput, type WriteCredentialInput, completionOutcome, createConnectApiClient, defaultAgentDirectory, delegateKeyFromPrivateKey, failedConnectOutcome, generateDelegateKey, helpText, installRuntime, mcpPackageSpec, normalizeRuntime, parseArgs, prepareSignerRuntime, redactSecrets, runConnect, runtimeInstallCapabilities, runtimeProfile, sdkPackageSpec, shortAddress, signerPackageSpec, writeCredentialFiles };

package/dist/index.d.ts

@@ -1,7 +1,26 @@
+export { CliIo, runCli } from './cli.js';
+
 interface ConnectApiClient {
     resolveSetup(input: ResolveSetupInput): Promise<ResolvedSetup>;
     registerSetup(input: RegisterSetupInput): Promise<RegisterSetupResponse>;
     updateInstallStatus(setupId: string, apiKey: string, input: UpdateInstallStatusInput): Promise<void>;
+    /**
+     * #1377 D: the narrow status read the connector polls after registering,
+     * authenticated with the agent API key it just minted (works while the
+     * agent is still `setup_pending` — the endpoint exists for exactly that
+     * window). Returns status plus the approved budget once approval lands;
+     * never any secret material.
+     */
+    getConnectorStatus(setupId: string, apiKey: string): Promise<ConnectorStatusResponse>;
+}
+interface ConnectorStatusResponse {
+    status: string;
+    approved_budget: {
+        token_symbol: string;
+        token_address: string;
+        amount: string;
+        reset_period_min: number;
+    } | null;
 }
 interface ResolveSetupInput {
     setupToken: string;
@@ -133,6 +152,8 @@ interface RuntimeProfile {
     label: string;
     restartMode: RestartMode;
     canWriteRuntimeConfig: boolean;
+    /** Precise, runtime-owned instruction for loading a freshly written MCP entry. */
+    activationInstruction: string;
 }
 declare function runtimeProfile(runtime: string | undefined, env?: NodeJS.ProcessEnv): RuntimeProfile;
 declare function normalizeRuntime(runtime: string | undefined, env?: NodeJS.ProcessEnv): RuntimeId;
@@ -264,7 +285,7 @@ declare function runtimeInstallCapabilities(runtime: string | undefined, env?: N
     restartRequired: boolean;
 };
 
-declare const CONNECTOR_VERSION = "0.1.22-alpha.0";
+declare const CONNECTOR_VERSION = "0.1.23-alpha.1";
 interface ConnectOptions {
     setupToken: string;
     apiBaseUrl: string;
@@ -275,6 +296,50 @@ interface ConnectOptions {
     ackSigner?: boolean;
     ackLocalTools?: boolean;
     localMcp?: boolean;
+    /**
+     * #1377 D: keep the process alive after registering and poll for the
+     * user's budget approval (default). Set false for structured/automation
+     * runs (--json) where prompt output emission matters more than narration.
+     */
+    waitForApproval?: boolean;
+    /** Test/injection overrides for the approval poll cadence and clock. */
+    approvalWait?: ApprovalWaitOptions;
+}
+/** The stable machine-readable result emitted by `haven-connect --json`. */
+declare const CONNECT_OUTCOME_SCHEMA_VERSION: 1;
+type ConnectOutcomeStatus = 'complete' | 'action_required' | 'failed';
+interface ConnectOutcome {
+    schema_version: typeof CONNECT_OUTCOME_SCHEMA_VERSION;
+    outcome: ConnectOutcomeStatus;
+    runtime: string;
+    topology: string;
+    configuration: {
+        hosted_mcp: boolean;
+        local_signer: boolean;
+        local_mcp: boolean;
+    };
+    probe: {
+        result: string;
+    };
+    activation: {
+        restart_required: boolean;
+        instruction: string;
+    };
+    next_action: string;
+    approval: {
+        required: boolean;
+        expires_at: string | null;
+    };
+    verification: {
+        tools: readonly ['haven_get_agent', 'haven_get_allowances'];
+        instruction: string;
+    };
+    delegate_address?: string;
+    setup_challenge_expires_at?: string;
+    error?: {
+        code: string;
+        next_action: string;
+    };
 }
 interface ConnectDeps {
     api?: ConnectApiClient;
@@ -284,6 +349,8 @@ interface ConnectDeps {
     writeCredentials?: typeof writeCredentialFiles;
     installRuntime?: typeof installRuntime;
     log?: (message: string) => void;
+    /** JSON CLI mode must not expose owner-only credential file locations. */
+    redactPaths?: boolean;
     /** Overridable so the Node-floor refusal is testable without spawning a Node. */
     nodeVersion?: string;
 }
@@ -292,12 +359,40 @@ interface ConnectResult {
     agentId: string;
     delegateAddress: string;
     credentialPaths: StoredCredentialPaths;
+    /** Additive, secret-free completion contract shared by library callers and --json. */
+    outcome: ConnectOutcome;
 }
 declare function runConnect(options: ConnectOptions, deps?: ConnectDeps): Promise<ConnectResult>;
+declare function completionOutcome(input: {
+    runtimeInstall: RuntimeInstallResult;
+    delegateAddress: string;
+    setupChallengeExpiresAt?: string;
+    approvalRequired: boolean;
+}): ConnectOutcome;
+/**
+ * A deliberately terse failure record: error messages can contain server or
+ * filesystem detail, while this public contract must remain safe to serialize.
+ */
+declare function failedConnectOutcome(runtimeHint: string | undefined, error: unknown): ConnectOutcome;
+/**
+ * #1377 D: after registering, the connector no longer goes dead while the
+ * user approves in Haven — it polls the narrow connector-status endpoint
+ * (agent-API-key auth, works during `setup_pending`) and narrates progress in
+ * the flow's voice, ending in a concrete celebration naming the granted
+ * authority. Bounds (stated per the issue): poll every 5 s, give up after
+ * 3 minutes — the connector ALWAYS terminates on its own; a timeout is a
+ * clean exit with guidance, never a hang. Injectable clock/cadence for tests.
+ */
+interface ApprovalWaitOptions {
+    intervalMs?: number;
+    timeoutMs?: number;
+    sleep?: (ms: number) => Promise<void>;
+}
 
 interface ParsedCli {
     options: ConnectOptions;
     help: boolean;
+    json: boolean;
 }
 declare function parseArgs(argv: string[], env?: NodeJS.ProcessEnv): ParsedCli;
 declare function helpText(): string;
@@ -307,12 +402,12 @@ declare function shortAddress(address: string): string;
 
 declare const MCP_RUNTIME_MANIFEST: {
     readonly mcpPackage: "@haven_ai/mcp";
-    readonly mcpVersion: "0.1.22-alpha.0";
+    readonly mcpVersion: "0.1.23-alpha.1";
     readonly sdkPackage: "@haven_ai/sdk";
-    readonly sdkVersion: "0.1.22-alpha.0";
+    readonly sdkVersion: "0.1.23-alpha.1";
     readonly signerPackage: "@haven_ai/signer";
-    readonly signerVersion: "0.1.22-alpha.0";
-    readonly minimumNodeVersion: "24.0.0";
+    readonly signerVersion: "0.1.23-alpha.1";
+    readonly minimumNodeVersion: "22.0.0";
     readonly supportedClients: readonly ["codex-cli", "codex-desktop", "claude-code"];
     readonly requiredTools: readonly string[];
 };
@@ -320,4 +415,4 @@ declare function mcpPackageSpec(): string;
 declare function sdkPackageSpec(): string;
 declare function signerPackageSpec(): string;
 
-export { CONNECTOR_VERSION, type ConnectApiClient, type ConnectDeps, type ConnectOptions, type ConnectResult, type LocalDelegateKey, MCP_RUNTIME_MANIFEST, type PrepareSignerRuntimeInput, type PreparedSignerRuntime, type RegisterSetupInput, type RegisterSetupResponse, type ResolveSetupInput, type ResolvedSetup, type RuntimeId, type RuntimeInstallInput, type RuntimeInstallResult, type RuntimeProfile, type StoredCredentialPaths, type UpdateInstallStatusInput, type WriteCredentialInput, createConnectApiClient, defaultAgentDirectory, delegateKeyFromPrivateKey, generateDelegateKey, helpText, installRuntime, mcpPackageSpec, normalizeRuntime, parseArgs, prepareSignerRuntime, redactSecrets, runConnect, runtimeInstallCapabilities, runtimeProfile, sdkPackageSpec, shortAddress, signerPackageSpec, writeCredentialFiles };
+export { CONNECTOR_VERSION, CONNECT_OUTCOME_SCHEMA_VERSION, type ConnectApiClient, type ConnectDeps, type ConnectOptions, type ConnectOutcome, type ConnectOutcomeStatus, type ConnectResult, type LocalDelegateKey, MCP_RUNTIME_MANIFEST, type ParsedCli, type PrepareSignerRuntimeInput, type PreparedSignerRuntime, type RegisterSetupInput, type RegisterSetupResponse, type ResolveSetupInput, type ResolvedSetup, type RuntimeId, type RuntimeInstallInput, type RuntimeInstallResult, type RuntimeProfile, type StoredCredentialPaths, type UpdateInstallStatusInput, type WriteCredentialInput, completionOutcome, createConnectApiClient, defaultAgentDirectory, delegateKeyFromPrivateKey, failedConnectOutcome, generateDelegateKey, helpText, installRuntime, mcpPackageSpec, normalizeRuntime, parseArgs, prepareSignerRuntime, redactSecrets, runConnect, runtimeInstallCapabilities, runtimeProfile, sdkPackageSpec, shortAddress, signerPackageSpec, writeCredentialFiles };