@haven_ai/connect 0.1.29-alpha.0 → 0.1.30-alpha.0

package/dist/index.d.cts

@@ -12,6 +12,11 @@ interface ConnectApiClient {
      * never any secret material.
      */
     getConnectorStatus(setupId: string, apiKey: string): Promise<ConnectorStatusResponse>;
+    /**
+     * #1700: the agent behind an API key. Used by the re-key flow on both sides
+     * of the dashboard hand-off — see {@link AgentIdentity}.
+     */
+    getAgentIdentity(apiKey: string): Promise<AgentIdentity>;
 }
 interface ConnectorStatusResponse {
     status: string;
@@ -33,6 +38,18 @@ interface RegisterSetupInput extends ResolveSetupInput {
     proofSignature: string;
     apiKeyHash: string;
     apiKeyPrefix: string;
+    /**
+     * #1878: the RESOLVED hosted MCP server name this agent is being wired as —
+     * `haven` for the bare pair, `haven-<slug>` for a named one. Sent so the
+     * dashboard can tell two agents in one harness apart; it is a display aid
+     * and Haven keys nothing off it.
+     *
+     * Always sent by a connector that supports it, bare pair included. Omitting
+     * it for the bare pair would make "absent" ambiguous between *this is the
+     * unnamed pair* and *an older connector said nothing*, and only the second
+     * of those may render as unknown.
+     */
+    mcpServerName?: string;
     connectorContext?: ConnectorContext;
     installCapabilities?: {
         canWriteRuntimeConfig?: boolean;
@@ -105,6 +122,25 @@ interface RegisterSetupResponse {
     hosted_mcp_url: string;
     next_action: string;
 }
+/**
+ * The agent identity behind an API key (#1700).
+ *
+ * Read from `GET /machine-payments/agent`, the same agent-authenticated
+ * endpoint the SDK's `getAgent()` uses. Re-key needs it twice and for two
+ * different questions: BEFORE, to refuse a legacy-rail account the way the
+ * backend would rather than let the owner discover it five signed steps later;
+ * and AFTER, to prove the API key the owner pasted really belongs to this
+ * agent and really names the key this machine just generated.
+ */
+interface AgentIdentity {
+    id: string;
+    name: string;
+    status: string;
+    safe_address: string | null;
+    delegate_address: string | null;
+    chain_id: number | null;
+    execution_rail: 'legacy' | 'delegation' | string;
+}
 declare function createConnectApiClient(baseUrl: string, fetchImpl?: typeof fetch): ConnectApiClient;
 
 interface LocalDelegateKey {
@@ -411,7 +447,7 @@ declare function runtimeInstallCapabilities(runtime: string | undefined, env?: N
     restartRequired: boolean;
 };
 
-declare const CONNECTOR_VERSION = "0.1.29-alpha.0";
+declare const CONNECTOR_VERSION = "0.1.30-alpha.0";
 interface ConnectOptions {
     setupToken: string;
     apiBaseUrl: string;
@@ -564,6 +600,16 @@ interface ParsedCli {
         reason?: string;
         replacedBy?: string;
     };
+    /**
+     * #1700: replace an agent's signing key on this machine. Two phases, because
+     * the dashboard sits between them — `start` generates the key and prints its
+     * address, `finish` writes the key the owner brings back. No setup token: the
+     * re-key API is owner-authenticated and this connector never calls it.
+     */
+    rekey?: {
+        phase: 'start' | 'finish';
+        newApiKey?: string;
+    };
 }
 declare function parseArgs(argv: string[], env?: NodeJS.ProcessEnv): ParsedCli;
 declare function helpText(): string;
@@ -651,11 +697,11 @@ declare function resolveRuntimeByInstalledClientPrompt(options?: ScanInstalledCl
 
 declare const MCP_RUNTIME_MANIFEST: {
     readonly mcpPackage: "@haven_ai/mcp";
-    readonly mcpVersion: "0.1.29-alpha.0";
+    readonly mcpVersion: "0.1.30-alpha.0";
     readonly sdkPackage: "@haven_ai/sdk";
-    readonly sdkVersion: "0.1.29-alpha.0";
+    readonly sdkVersion: "0.1.30-alpha.0";
     readonly signerPackage: "@haven_ai/signer";
-    readonly signerVersion: "0.1.29-alpha.0";
+    readonly signerVersion: "0.1.30-alpha.0";
     readonly minimumNodeVersion: "22.0.0";
     readonly supportedClients: readonly ["codex-cli", "codex-desktop", "claude-code"];
     readonly requiredTools: readonly string[];

package/dist/index.d.ts

@@ -12,6 +12,11 @@ interface ConnectApiClient {
      * never any secret material.
      */
     getConnectorStatus(setupId: string, apiKey: string): Promise<ConnectorStatusResponse>;
+    /**
+     * #1700: the agent behind an API key. Used by the re-key flow on both sides
+     * of the dashboard hand-off — see {@link AgentIdentity}.
+     */
+    getAgentIdentity(apiKey: string): Promise<AgentIdentity>;
 }
 interface ConnectorStatusResponse {
     status: string;
@@ -33,6 +38,18 @@ interface RegisterSetupInput extends ResolveSetupInput {
     proofSignature: string;
     apiKeyHash: string;
     apiKeyPrefix: string;
+    /**
+     * #1878: the RESOLVED hosted MCP server name this agent is being wired as —
+     * `haven` for the bare pair, `haven-<slug>` for a named one. Sent so the
+     * dashboard can tell two agents in one harness apart; it is a display aid
+     * and Haven keys nothing off it.
+     *
+     * Always sent by a connector that supports it, bare pair included. Omitting
+     * it for the bare pair would make "absent" ambiguous between *this is the
+     * unnamed pair* and *an older connector said nothing*, and only the second
+     * of those may render as unknown.
+     */
+    mcpServerName?: string;
     connectorContext?: ConnectorContext;
     installCapabilities?: {
         canWriteRuntimeConfig?: boolean;
@@ -105,6 +122,25 @@ interface RegisterSetupResponse {
     hosted_mcp_url: string;
     next_action: string;
 }
+/**
+ * The agent identity behind an API key (#1700).
+ *
+ * Read from `GET /machine-payments/agent`, the same agent-authenticated
+ * endpoint the SDK's `getAgent()` uses. Re-key needs it twice and for two
+ * different questions: BEFORE, to refuse a legacy-rail account the way the
+ * backend would rather than let the owner discover it five signed steps later;
+ * and AFTER, to prove the API key the owner pasted really belongs to this
+ * agent and really names the key this machine just generated.
+ */
+interface AgentIdentity {
+    id: string;
+    name: string;
+    status: string;
+    safe_address: string | null;
+    delegate_address: string | null;
+    chain_id: number | null;
+    execution_rail: 'legacy' | 'delegation' | string;
+}
 declare function createConnectApiClient(baseUrl: string, fetchImpl?: typeof fetch): ConnectApiClient;
 
 interface LocalDelegateKey {
@@ -411,7 +447,7 @@ declare function runtimeInstallCapabilities(runtime: string | undefined, env?: N
     restartRequired: boolean;
 };
 
-declare const CONNECTOR_VERSION = "0.1.29-alpha.0";
+declare const CONNECTOR_VERSION = "0.1.30-alpha.0";
 interface ConnectOptions {
     setupToken: string;
     apiBaseUrl: string;
@@ -564,6 +600,16 @@ interface ParsedCli {
         reason?: string;
         replacedBy?: string;
     };
+    /**
+     * #1700: replace an agent's signing key on this machine. Two phases, because
+     * the dashboard sits between them — `start` generates the key and prints its
+     * address, `finish` writes the key the owner brings back. No setup token: the
+     * re-key API is owner-authenticated and this connector never calls it.
+     */
+    rekey?: {
+        phase: 'start' | 'finish';
+        newApiKey?: string;
+    };
 }
 declare function parseArgs(argv: string[], env?: NodeJS.ProcessEnv): ParsedCli;
 declare function helpText(): string;
@@ -651,11 +697,11 @@ declare function resolveRuntimeByInstalledClientPrompt(options?: ScanInstalledCl
 
 declare const MCP_RUNTIME_MANIFEST: {
     readonly mcpPackage: "@haven_ai/mcp";
-    readonly mcpVersion: "0.1.29-alpha.0";
+    readonly mcpVersion: "0.1.30-alpha.0";
     readonly sdkPackage: "@haven_ai/sdk";
-    readonly sdkVersion: "0.1.29-alpha.0";
+    readonly sdkVersion: "0.1.30-alpha.0";
     readonly signerPackage: "@haven_ai/signer";
-    readonly signerVersion: "0.1.29-alpha.0";
+    readonly signerVersion: "0.1.30-alpha.0";
     readonly minimumNodeVersion: "22.0.0";
     readonly supportedClients: readonly ["codex-cli", "codex-desktop", "claude-code"];
     readonly requiredTools: readonly string[];