@haven_ai/connect 0.1.30-alpha.0 → 0.1.31-alpha.0

package/dist/index.cjs

@@ -153,6 +153,9 @@ var init_key = __esm({
 function redactSecrets(value) {
   return value.replace(API_KEY_RE, "sk_agent_[redacted]").replace(PRIVATE_KEY_RE, "0x[redacted-private-key]");
 }
+function redactForAutomation(value) {
+  return redactSecrets(value).replace(/(?:~|\/)[^\s`"']*\/(?:identity|signer|agent)\.json\b/g, "[credential-file-redacted]").replace(/(?:~|\/)[^\s`"']*\/\.env\b/g, "[credential-env-redacted]");
+}
 function shortAddress(address) {
   if (!/^0x[0-9a-fA-F]{40}$/.test(address)) return address;
   return `${address.slice(0, 6)}...${address.slice(-4)}`;
@@ -523,9 +526,9 @@ var init_runtime_manifest = __esm({
       mcpPackage: "@haven_ai/mcp",
       mcpVersion: mcp.MCP_VERSION,
       sdkPackage: "@haven_ai/sdk",
-      sdkVersion: "0.1.30-alpha.0",
+      sdkVersion: "0.1.31-alpha.0",
       signerPackage: "@haven_ai/signer",
-      signerVersion: "0.1.30-alpha.0",
+      signerVersion: "0.1.31-alpha.0",
       // Sourced from the SDK, never a literal (#1161). This field read '20.0.0'
       // while every package's `engines` said `>=24` and the docs said `>=24.0.0`,
       // so the guard that was supposed to enforce the floor waved Node v23 through
@@ -1948,11 +1951,13 @@ var init_connect_error = __esm({
     exports.ConnectError = class extends Error {
       code;
       nextAction;
-      constructor(code, message, nextAction2) {
+      details;
+      constructor(code, message, nextAction2, details = {}) {
         super(message);
         this.name = "ConnectError";
         this.code = code;
         this.nextAction = nextAction2;
+        this.details = details;
       }
     };
   }
@@ -1975,7 +1980,8 @@ async function resolveRuntimeSelection(explicit, force, options = {}) {
       throw new exports.ConnectError(
         "runtime_force_unrecognized",
         `Unknown --runtime-force value "${force}". Valid values: ${exports.RUNTIME_FLAG_VALUES}.`,
-        "rerun_connect_with_a_valid_runtime_name"
+        "rerun_connect_with_a_valid_runtime_name",
+        { allowedRuntimes: RUNTIME_FLAG_VALUE_LIST }
       );
     }
     return { runtime: forced, source: "force" };
@@ -1988,7 +1994,8 @@ async function resolveRuntimeSelection(explicit, force, options = {}) {
       throw new exports.ConnectError(
         "runtime_unrecognized",
         `"${supplied}" is not an agent runtime Haven knows. Valid values: ${exports.RUNTIME_FLAG_VALUES} (the aliases cowork, codex and openclaw are accepted too). Re-run with one of those, or --runtime other to store credentials and finish the MCP setup by hand. Nothing was written and the Haven setup token is still unused.`,
-        "rerun_connect_with_a_valid_runtime_name"
+        "rerun_connect_with_a_valid_runtime_name",
+        { allowedRuntimes: RUNTIME_FLAG_VALUE_LIST }
       );
     }
     return { runtime: detected, source: "detected", discardedHint: supplied };
@@ -2023,7 +2030,7 @@ function detectRuntime(env) {
   if (env.HERMES_HOME || env.HERMES_AGENT) return "hermes";
   return null;
 }
-var RUNTIME_PROFILES, RUNTIME_ALIASES; exports.RUNTIME_FLAG_VALUES = void 0;
+var RUNTIME_PROFILES, RUNTIME_ALIASES, RUNTIME_FLAG_VALUE_LIST; exports.RUNTIME_FLAG_VALUES = void 0;
 var init_runtime_registry = __esm({
   "src/runtime-registry.ts"() {
     init_connect_error();
@@ -2142,7 +2149,18 @@ var init_runtime_registry = __esm({
       other: "other",
       manual: "other"
     };
-    exports.RUNTIME_FLAG_VALUES = "claude-code, codex-cli, codex-desktop, cursor, vscode, vscode-insiders, claude-desktop, hermes, other";
+    RUNTIME_FLAG_VALUE_LIST = [
+      "claude-code",
+      "codex-cli",
+      "codex-desktop",
+      "cursor",
+      "vscode",
+      "vscode-insiders",
+      "claude-desktop",
+      "hermes",
+      "other"
+    ];
+    exports.RUNTIME_FLAG_VALUES = RUNTIME_FLAG_VALUE_LIST.join(", ");
   }
 });
 async function acknowledgeLocalSignerConsent(signerPath, log) {
@@ -3705,7 +3723,7 @@ function defaultPromptIo() {
 // src/runtime.ts
 init_local_mcp_runtime();
 init_runtime_manifest();
-var CONNECTOR_VERSION = "0.1.30-alpha.0";
+var CONNECTOR_VERSION = "0.1.31-alpha.0";
 var CONNECT_OUTCOME_SCHEMA_VERSION = 1;
 async function runConnect(options, deps = {}) {
   assertSupportedNodeVersion(deps.nodeVersion, exports.MCP_RUNTIME_MANIFEST.minimumNodeVersion);
@@ -3730,7 +3748,14 @@ async function runConnect(options, deps = {}) {
     throw new exports.ConnectError(
       "runtime_undetermined",
       `Could not determine the agent runtime: nothing was detected in this environment and no --runtime was given. If you are an AI agent running this command: re-run it once, unchanged except for adding --runtime <name>, naming the harness you are running in \u2014 one of: ${exports.RUNTIME_FLAG_VALUES} (the aliases cowork, codex and openclaw are accepted too). Do not guess: if your harness is not one of those, use --runtime other, which stores the credentials and prints the manual MCP steps. Nothing was written and the Haven setup token is still unused.`,
-      "rerun_connect_with_explicit_runtime"
+      "rerun_connect_with_explicit_runtime",
+      // #2091: the values must ride structurally too. The backend's setup
+      // prompt permits a retry only with "one of the values that refusal
+      // lists" — and --json discards prose, so a prose-only list deadlocked
+      // every automation run in an undetected runtime (Codex in the field:
+      // npx needs network, Codex runs network commands unsandboxed, and the
+      // unsandboxed path carries none of the CODEX_* detection vars).
+      { allowedRuntimes: RUNTIME_FLAG_VALUE_LIST }
     );
   }
   const runtime = selection.runtime;
@@ -3752,11 +3777,16 @@ async function runConnect(options, deps = {}) {
     log(`runtime: ${runtime} (chosen at the prompt \u2014 nothing was detected in this environment)`);
   }
   log("Warming up your connection to Haven\u2026");
-  const setup = await api.resolveSetup({
-    setupToken: options.setupToken,
-    connectorVersion,
-    runtime
-  });
+  let setup;
+  try {
+    setup = await api.resolveSetup({
+      setupToken: options.setupToken,
+      connectorVersion,
+      runtime
+    });
+  } catch (err) {
+    throw deadSetupTokenError(err) ?? err;
+  }
   assertSetupChallengeIsUsable(setup.challenge.expires_at);
   printSetupSummary(setup, log);
   await preflightStorage({ baseDir: options.credentialsDir, warn: log });
@@ -3793,6 +3823,8 @@ async function runConnect(options, deps = {}) {
       installCapabilities
     });
   } catch (err) {
+    const dead = deadSetupTokenError(err);
+    if (dead) throw dead;
     if (isExpiredSetupChallenge(err)) {
       throw new Error(
         "The Haven setup challenge expired while connecting. Return to Haven, start a fresh connection, and run its new Connect command. Do not reuse or paste credentials."
@@ -3990,7 +4022,17 @@ function failedConnectOutcome(runtimeHint, error) {
       tools: ["haven_get_agent", "haven_get_allowances"],
       instruction: "After a successful setup and activation, verify only with haven_get_agent and haven_get_allowances."
     },
-    error: { code, next_action: nextAction2 }
+    error: {
+      code,
+      next_action: nextAction2,
+      // Only a ConnectError's message enters the JSON record: the vocabulary's
+      // prose is connector-authored and safe to serialize, while a plain
+      // Error can carry arbitrary server or filesystem detail (that stance is
+      // pinned by test). Redaction stays on as belt-and-braces; plain-Error
+      // runs still get their redacted message on stderr via the CLI mirror.
+      ...error instanceof exports.ConnectError && message ? { message: redactForAutomation(message) } : {},
+      ...error instanceof exports.ConnectError && error.details.allowedRuntimes ? { allowed_runtimes: error.details.allowedRuntimes } : {}
+    }
   };
 }
 function printSetupSummary(setup, log) {
@@ -4012,16 +4054,20 @@ function assertSetupChallengeIsUsable(expiresAt) {
     "This Haven setup challenge is expired or invalid. Return to Haven, start a fresh connection, and rerun Connect. No local credentials were written."
   );
 }
+function deadSetupTokenError(err) {
+  if (!(err instanceof ConnectRequestError) || err.status !== 410 && err.status !== 401) return null;
+  return new exports.ConnectError(
+    "setup_challenge_expired_or_invalid",
+    "This Haven setup token is expired or invalid \u2014 tokens are single-use and expire 30 minutes after the dashboard issues them, and a mistyped token reads the same way. Return to Haven, start a fresh connection, and run its new Connect command. No local credentials were written.",
+    "return_to_haven_for_fresh_setup"
+  );
+}
 function isExpiredSetupChallenge(err) {
   return err instanceof Error && /(?:setup )?challenge.*expir|expir.*(?:setup )?challenge/i.test(err.message);
 }
 function secureLogger(log, redactPaths = false) {
   return (message) => {
-    let safe = redactSecrets(message);
-    if (redactPaths) {
-      safe = safe.replace(/(?:~|\/)[^\s`"']*\/(?:identity|signer|agent)\.json\b/g, "[credential-file-redacted]").replace(/(?:~|\/)[^\s`"']*\/\.env\b/g, "[credential-env-redacted]");
-    }
-    log(safe);
+    log(redactPaths ? redactForAutomation(message) : redactSecrets(message));
   };
 }
 function printRuntimeInstall(result, log) {
@@ -4365,6 +4411,8 @@ async function runCli(argv, io = {
     parsed = parseArgs(argv);
   } catch (err) {
     if (wantsJson) {
+      io.stderr(`${redactForAutomation(err instanceof Error ? err.message : String(err))}
+`);
       io.stdout(`${JSON.stringify(failedConnectOutcome(void 0, err))}
 `);
     } else {
@@ -4545,6 +4593,8 @@ async function runCli(argv, io = {
     return 0;
   } catch (err) {
     if (parsed.json) {
+      io.stderr(`${redactForAutomation(err instanceof Error ? err.message : String(err))}
+`);
       io.stdout(`${JSON.stringify(failedConnectOutcome(parsed.options.runtime, err))}
 `);
     } else {