@haven_ai/connect 0.1.26-alpha.0 → 0.1.27-alpha.0

package/dist/index.d.cts

@@ -51,7 +51,11 @@ interface UpdateInstallStatusInput {
     localMcpAcknowledged?: boolean;
     activationCommandAvailable?: boolean;
     skillInstalled?: boolean;
-    probeResult: string;
+    /**
+     * Omitted on the #1543 early config-written report — no probe has run yet,
+     * and the backend merge keeps the key absent until the final report sets it.
+     */
+    probeResult?: string;
     restartRequired: boolean;
     nextUserAction: string;
     errorCode?: string | null;
@@ -163,6 +167,14 @@ type RuntimeMcpMode = 'local_stdio' | 'hosted_plus_signer' | 'manual';
 type LocalMcpProbeStatus = 'ok' | 'timeout' | 'process_error' | 'bad_response' | 'missing_tools';
 interface LocalMcpProbeResult {
     status: LocalMcpProbeStatus;
+    /** #1589: the initialize response's serverInfo/capabilities, when reached —
+     *  the doctor reports the signer's advertised compat versions from here
+     *  instead of a second probe call. */
+    serverInfo?: {
+        name?: string;
+        version?: string;
+    };
+    capabilities?: Record<string, unknown>;
     toolNames?: string[];
 }
 
@@ -201,6 +213,8 @@ interface PreparedSignerRuntime {
 }
 interface SignerRuntimeDeps {
     runCommand?: (command: string, args: string[]) => Promise<void>;
+    /** Heartbeats during the (possibly minutes-long) npm install (#1586). */
+    onProgress?: (message: string) => void;
 }
 /**
  * Pre-install the edge signer into a version-pinned, connector-managed
@@ -262,6 +276,27 @@ interface RuntimeInstallResult {
     signerRuntimePrepared?: boolean;
     messages: string[];
 }
+/**
+ * The config-write snapshot handed to `onRuntimeConfigured` (#1543). The
+ * booleans mirror the semantics of the FINAL report's unlock keys minus the
+ * probe verdicts: "configured" here means the config write succeeded, the
+ * required consent is acknowledged, and the signer credential exists on disk
+ * (a local fs check) — not that a handshake has verified it. A later probe
+ * failure refines the final report and sets its errorCode; the dashboard's
+ * unlock condition accepts either state.
+ */
+interface EarlyRuntimeConfigReport {
+    runtime: RuntimeId;
+    runtimeMcpMode: RuntimeMcpMode;
+    hostedMcpConfigured: boolean;
+    localSignerConfigured: boolean;
+    localMcpConfigured: boolean;
+    signerAcknowledged?: boolean;
+    localMcpAcknowledged?: boolean;
+    restartRequired: boolean;
+    nextUserAction: string;
+    errorCode?: string;
+}
 interface RuntimeInstallDeps {
     env?: NodeJS.ProcessEnv;
     homeDir?: string;
@@ -274,9 +309,22 @@ interface RuntimeInstallDeps {
      * When provided, a few lightweight heartbeat lines are emitted as they run.
      */
     onProgress?: (message: string) => void;
+    /**
+     * #1543: invoked once, the moment the runtime MCP config write has settled —
+     * BEFORE the network probes and the skill install. The dashboard withholds
+     * its budget-approval controls until an install-status report shows the
+     * runtime configured, and the final report only lands after the entire
+     * install; gating approval on that tail made the user wait on work approval
+     * does not depend on. The snapshot carries the config-write facts (no probe
+     * verdicts, no skill state); the caller's complete report remains
+     * authoritative and overwrites these keys. Best-effort by contract: a
+     * throwing callback is swallowed and never fails the install.
+     */
+    onRuntimeConfigured?: (report: EarlyRuntimeConfigReport) => Promise<void> | void;
     runCommand?: (command: string, args: string[]) => Promise<void>;
     prepareLocalMcpRuntime?: (input: PrepareLocalMcpRuntimeInput) => Promise<PreparedLocalMcpRuntime>;
     prepareSignerRuntime?: (input: PrepareSignerRuntimeInput) => Promise<PreparedSignerRuntime>;
+    probeSignerTools?: (command: string, args: string[], requiredTools: readonly string[]) => Promise<LocalMcpProbeResult>;
     probeLocalMcpTools?: (command: string, args: string[], requiredTools: readonly string[]) => Promise<LocalMcpProbeResult>;
 }
 declare function installRuntime(input: RuntimeInstallInput, deps?: RuntimeInstallDeps): Promise<RuntimeInstallResult>;
@@ -285,7 +333,7 @@ declare function runtimeInstallCapabilities(runtime: string | undefined, env?: N
     restartRequired: boolean;
 };
 
-declare const CONNECTOR_VERSION = "0.1.26-alpha.0";
+declare const CONNECTOR_VERSION = "0.1.27-alpha.0";
 interface ConnectOptions {
     setupToken: string;
     apiBaseUrl: string;
@@ -380,8 +428,16 @@ declare function failedConnectOutcome(runtimeHint: string | undefined, error: un
  * (agent-API-key auth, works during `setup_pending`) and narrates progress in
  * the flow's voice, ending in a concrete celebration naming the granted
  * authority. Bounds (stated per the issue): poll every 5 s, give up after
- * 3 minutes — the connector ALWAYS terminates on its own; a timeout is a
- * clean exit with guidance, never a hang. Injectable clock/cadence for tests.
+ * 3 minutes (36 polls; with the immediate first check below the last one
+ * lands at ~175 s) — the connector ALWAYS terminates on its own; a timeout
+ * is a clean exit with guidance, never a hang. Injectable clock/cadence for
+ * tests.
+ *
+ * #1542: the first check happens BEFORE the "waiting for you to approve" line
+ * is printed. Users routinely approve in the dashboard while the runtime
+ * install is still running, and announcing a wait that is already over made
+ * the very next line ("Budget approved 🎉") read as a contradiction — the
+ * field-test agent relayed the pair verbatim as a bug.
  */
 interface ApprovalWaitOptions {
     intervalMs?: number;
@@ -393,6 +449,9 @@ interface ParsedCli {
     options: ConnectOptions;
     help: boolean;
     json: boolean;
+    /** #1589: diagnosis mode — no setup token required. */
+    doctor: boolean;
+    repair: boolean;
 }
 declare function parseArgs(argv: string[], env?: NodeJS.ProcessEnv): ParsedCli;
 declare function helpText(): string;
@@ -402,14 +461,21 @@ declare function shortAddress(address: string): string;
 
 declare const MCP_RUNTIME_MANIFEST: {
     readonly mcpPackage: "@haven_ai/mcp";
-    readonly mcpVersion: "0.1.26-alpha.0";
+    readonly mcpVersion: "0.1.27-alpha.0";
     readonly sdkPackage: "@haven_ai/sdk";
-    readonly sdkVersion: "0.1.26-alpha.0";
+    readonly sdkVersion: "0.1.27-alpha.0";
     readonly signerPackage: "@haven_ai/signer";
-    readonly signerVersion: "0.1.26-alpha.0";
+    readonly signerVersion: "0.1.27-alpha.0";
     readonly minimumNodeVersion: "22.0.0";
     readonly supportedClients: readonly ["codex-cli", "codex-desktop", "claude-code"];
     readonly requiredTools: readonly string[];
+    /**
+     * The signer MCP's tool surface, DERIVED from the pinned @haven_ai/signer
+     * package (#1587) — same anti-drift rule as `requiredTools` above: a
+     * literal list here would rot the first time the signer gains a tool.
+     * The handshake probe requires all of them.
+     */
+    readonly requiredSignerTools: readonly string[];
 };
 declare function mcpPackageSpec(): string;
 declare function sdkPackageSpec(): string;

package/dist/index.d.ts

@@ -51,7 +51,11 @@ interface UpdateInstallStatusInput {
     localMcpAcknowledged?: boolean;
     activationCommandAvailable?: boolean;
     skillInstalled?: boolean;
-    probeResult: string;
+    /**
+     * Omitted on the #1543 early config-written report — no probe has run yet,
+     * and the backend merge keeps the key absent until the final report sets it.
+     */
+    probeResult?: string;
     restartRequired: boolean;
     nextUserAction: string;
     errorCode?: string | null;
@@ -163,6 +167,14 @@ type RuntimeMcpMode = 'local_stdio' | 'hosted_plus_signer' | 'manual';
 type LocalMcpProbeStatus = 'ok' | 'timeout' | 'process_error' | 'bad_response' | 'missing_tools';
 interface LocalMcpProbeResult {
     status: LocalMcpProbeStatus;
+    /** #1589: the initialize response's serverInfo/capabilities, when reached —
+     *  the doctor reports the signer's advertised compat versions from here
+     *  instead of a second probe call. */
+    serverInfo?: {
+        name?: string;
+        version?: string;
+    };
+    capabilities?: Record<string, unknown>;
     toolNames?: string[];
 }
 
@@ -201,6 +213,8 @@ interface PreparedSignerRuntime {
 }
 interface SignerRuntimeDeps {
     runCommand?: (command: string, args: string[]) => Promise<void>;
+    /** Heartbeats during the (possibly minutes-long) npm install (#1586). */
+    onProgress?: (message: string) => void;
 }
 /**
  * Pre-install the edge signer into a version-pinned, connector-managed
@@ -262,6 +276,27 @@ interface RuntimeInstallResult {
     signerRuntimePrepared?: boolean;
     messages: string[];
 }
+/**
+ * The config-write snapshot handed to `onRuntimeConfigured` (#1543). The
+ * booleans mirror the semantics of the FINAL report's unlock keys minus the
+ * probe verdicts: "configured" here means the config write succeeded, the
+ * required consent is acknowledged, and the signer credential exists on disk
+ * (a local fs check) — not that a handshake has verified it. A later probe
+ * failure refines the final report and sets its errorCode; the dashboard's
+ * unlock condition accepts either state.
+ */
+interface EarlyRuntimeConfigReport {
+    runtime: RuntimeId;
+    runtimeMcpMode: RuntimeMcpMode;
+    hostedMcpConfigured: boolean;
+    localSignerConfigured: boolean;
+    localMcpConfigured: boolean;
+    signerAcknowledged?: boolean;
+    localMcpAcknowledged?: boolean;
+    restartRequired: boolean;
+    nextUserAction: string;
+    errorCode?: string;
+}
 interface RuntimeInstallDeps {
     env?: NodeJS.ProcessEnv;
     homeDir?: string;
@@ -274,9 +309,22 @@ interface RuntimeInstallDeps {
      * When provided, a few lightweight heartbeat lines are emitted as they run.
      */
     onProgress?: (message: string) => void;
+    /**
+     * #1543: invoked once, the moment the runtime MCP config write has settled —
+     * BEFORE the network probes and the skill install. The dashboard withholds
+     * its budget-approval controls until an install-status report shows the
+     * runtime configured, and the final report only lands after the entire
+     * install; gating approval on that tail made the user wait on work approval
+     * does not depend on. The snapshot carries the config-write facts (no probe
+     * verdicts, no skill state); the caller's complete report remains
+     * authoritative and overwrites these keys. Best-effort by contract: a
+     * throwing callback is swallowed and never fails the install.
+     */
+    onRuntimeConfigured?: (report: EarlyRuntimeConfigReport) => Promise<void> | void;
     runCommand?: (command: string, args: string[]) => Promise<void>;
     prepareLocalMcpRuntime?: (input: PrepareLocalMcpRuntimeInput) => Promise<PreparedLocalMcpRuntime>;
     prepareSignerRuntime?: (input: PrepareSignerRuntimeInput) => Promise<PreparedSignerRuntime>;
+    probeSignerTools?: (command: string, args: string[], requiredTools: readonly string[]) => Promise<LocalMcpProbeResult>;
     probeLocalMcpTools?: (command: string, args: string[], requiredTools: readonly string[]) => Promise<LocalMcpProbeResult>;
 }
 declare function installRuntime(input: RuntimeInstallInput, deps?: RuntimeInstallDeps): Promise<RuntimeInstallResult>;
@@ -285,7 +333,7 @@ declare function runtimeInstallCapabilities(runtime: string | undefined, env?: N
     restartRequired: boolean;
 };
 
-declare const CONNECTOR_VERSION = "0.1.26-alpha.0";
+declare const CONNECTOR_VERSION = "0.1.27-alpha.0";
 interface ConnectOptions {
     setupToken: string;
     apiBaseUrl: string;
@@ -380,8 +428,16 @@ declare function failedConnectOutcome(runtimeHint: string | undefined, error: un
  * (agent-API-key auth, works during `setup_pending`) and narrates progress in
  * the flow's voice, ending in a concrete celebration naming the granted
  * authority. Bounds (stated per the issue): poll every 5 s, give up after
- * 3 minutes — the connector ALWAYS terminates on its own; a timeout is a
- * clean exit with guidance, never a hang. Injectable clock/cadence for tests.
+ * 3 minutes (36 polls; with the immediate first check below the last one
+ * lands at ~175 s) — the connector ALWAYS terminates on its own; a timeout
+ * is a clean exit with guidance, never a hang. Injectable clock/cadence for
+ * tests.
+ *
+ * #1542: the first check happens BEFORE the "waiting for you to approve" line
+ * is printed. Users routinely approve in the dashboard while the runtime
+ * install is still running, and announcing a wait that is already over made
+ * the very next line ("Budget approved 🎉") read as a contradiction — the
+ * field-test agent relayed the pair verbatim as a bug.
  */
 interface ApprovalWaitOptions {
     intervalMs?: number;
@@ -393,6 +449,9 @@ interface ParsedCli {
     options: ConnectOptions;
     help: boolean;
     json: boolean;
+    /** #1589: diagnosis mode — no setup token required. */
+    doctor: boolean;
+    repair: boolean;
 }
 declare function parseArgs(argv: string[], env?: NodeJS.ProcessEnv): ParsedCli;
 declare function helpText(): string;
@@ -402,14 +461,21 @@ declare function shortAddress(address: string): string;
 
 declare const MCP_RUNTIME_MANIFEST: {
     readonly mcpPackage: "@haven_ai/mcp";
-    readonly mcpVersion: "0.1.26-alpha.0";
+    readonly mcpVersion: "0.1.27-alpha.0";
     readonly sdkPackage: "@haven_ai/sdk";
-    readonly sdkVersion: "0.1.26-alpha.0";
+    readonly sdkVersion: "0.1.27-alpha.0";
     readonly signerPackage: "@haven_ai/signer";
-    readonly signerVersion: "0.1.26-alpha.0";
+    readonly signerVersion: "0.1.27-alpha.0";
     readonly minimumNodeVersion: "22.0.0";
     readonly supportedClients: readonly ["codex-cli", "codex-desktop", "claude-code"];
     readonly requiredTools: readonly string[];
+    /**
+     * The signer MCP's tool surface, DERIVED from the pinned @haven_ai/signer
+     * package (#1587) — same anti-drift rule as `requiredTools` above: a
+     * literal list here would rot the first time the signer gains a tool.
+     * The handshake probe requires all of them.
+     */
+    readonly requiredSignerTools: readonly string[];
 };
 declare function mcpPackageSpec(): string;
 declare function sdkPackageSpec(): string;