@haven_ai/connect 0.1.37-alpha.0 → 0.2.1-alpha.0

package/dist/index.d.cts

@@ -170,7 +170,10 @@ interface AgentIdentity {
     id: string;
     name: string;
     status: string;
+    /** @deprecated #2908 — same value as `account_address`; the server drops it at #2914. */
     safe_address: string | null;
+    /** #2908 — the account-vocabulary twin (not emitted by every server yet; read first, never required). */
+    account_address?: string | null;
     delegate_address: string | null;
     chain_id: number | null;
     execution_rail: 'legacy' | 'delegation' | string;
@@ -204,7 +207,13 @@ interface WriteCredentialInput {
     apiKey: string;
     delegateKey: string;
     delegateAddress: string;
-    safeAddress?: string;
+    /**
+     * The Haven account (smart account) address. Written to every credential
+     * file as `account_address` ONLY (#2908 — write the new name, never the
+     * old; the readers in `@haven_ai/signer` / `@haven_ai/mcp` fall back to the
+     * pre-#2908 `safe_address` permanently, so a file from either era loads).
+     */
+    accountAddress?: string;
     chainId?: number;
     network?: string;
     agentBudget?: Array<{
@@ -729,7 +738,7 @@ type WiringCollisionResolution = {
     action: 'abort';
 };
 
-declare const CONNECTOR_VERSION = "0.1.37-alpha.0";
+declare const CONNECTOR_VERSION = "0.2.1-alpha.0";
 interface ConnectOptions {
     setupToken: string;
     apiBaseUrl: string;
@@ -1129,11 +1138,11 @@ declare function isConnectError(err: unknown): err is ConnectError;
 
 declare const MCP_RUNTIME_MANIFEST: {
     readonly mcpPackage: "@haven_ai/mcp";
-    readonly mcpVersion: "0.1.37-alpha.0";
+    readonly mcpVersion: "0.2.1-alpha.0";
     readonly sdkPackage: "@haven_ai/sdk";
-    readonly sdkVersion: "0.1.37-alpha.0";
+    readonly sdkVersion: "0.2.1-alpha.0";
     readonly signerPackage: "@haven_ai/signer";
-    readonly signerVersion: "0.1.37-alpha.0";
+    readonly signerVersion: "0.2.1-alpha.0";
     readonly minimumNodeVersion: "22.0.0";
     readonly supportedClients: readonly ["codex-cli", "codex-desktop", "claude-code"];
     readonly requiredTools: readonly string[];

package/dist/index.d.ts

@@ -170,7 +170,10 @@ interface AgentIdentity {
     id: string;
     name: string;
     status: string;
+    /** @deprecated #2908 — same value as `account_address`; the server drops it at #2914. */
     safe_address: string | null;
+    /** #2908 — the account-vocabulary twin (not emitted by every server yet; read first, never required). */
+    account_address?: string | null;
     delegate_address: string | null;
     chain_id: number | null;
     execution_rail: 'legacy' | 'delegation' | string;
@@ -204,7 +207,13 @@ interface WriteCredentialInput {
     apiKey: string;
     delegateKey: string;
     delegateAddress: string;
-    safeAddress?: string;
+    /**
+     * The Haven account (smart account) address. Written to every credential
+     * file as `account_address` ONLY (#2908 — write the new name, never the
+     * old; the readers in `@haven_ai/signer` / `@haven_ai/mcp` fall back to the
+     * pre-#2908 `safe_address` permanently, so a file from either era loads).
+     */
+    accountAddress?: string;
     chainId?: number;
     network?: string;
     agentBudget?: Array<{
@@ -729,7 +738,7 @@ type WiringCollisionResolution = {
     action: 'abort';
 };
 
-declare const CONNECTOR_VERSION = "0.1.37-alpha.0";
+declare const CONNECTOR_VERSION = "0.2.1-alpha.0";
 interface ConnectOptions {
     setupToken: string;
     apiBaseUrl: string;
@@ -1129,11 +1138,11 @@ declare function isConnectError(err: unknown): err is ConnectError;
 
 declare const MCP_RUNTIME_MANIFEST: {
     readonly mcpPackage: "@haven_ai/mcp";
-    readonly mcpVersion: "0.1.37-alpha.0";
+    readonly mcpVersion: "0.2.1-alpha.0";
     readonly sdkPackage: "@haven_ai/sdk";
-    readonly sdkVersion: "0.1.37-alpha.0";
+    readonly sdkVersion: "0.2.1-alpha.0";
     readonly signerPackage: "@haven_ai/signer";
-    readonly signerVersion: "0.1.37-alpha.0";
+    readonly signerVersion: "0.2.1-alpha.0";
     readonly minimumNodeVersion: "22.0.0";
     readonly supportedClients: readonly ["codex-cli", "codex-desktop", "claude-code"];
     readonly requiredTools: readonly string[];

package/dist/index.js

@@ -266,7 +266,7 @@ function signerPayload(input) {
     delegate_key: input.delegateKey,
     delegate_address: input.delegateAddress,
     agent_id: input.agentId,
-    safe_address: input.safeAddress,
+    account_address: input.accountAddress,
     chain_id: input.chainId,
     network: input.network,
     x402_binding_signer: input.x402BindingSigner,
@@ -277,7 +277,7 @@ function identityPayload(input) {
   return {
     api_key: input.apiKey,
     agent_id: input.agentId,
-    safe_address: input.safeAddress,
+    account_address: input.accountAddress,
     chain_id: input.chainId,
     network: input.network,
     api_url: input.apiUrl,
@@ -290,7 +290,7 @@ function agentPayload(input) {
   return {
     agent_id: input.agentId,
     delegate_address: input.delegateAddress,
-    safe_address: input.safeAddress,
+    account_address: input.accountAddress,
     chain_id: input.chainId,
     network: input.network,
     agent_budget: input.agentBudget,
@@ -324,13 +324,20 @@ async function readStoredCredentials(serverName, agentIdOrSlug, baseDir) {
     apiUrl,
     hostedMcpUrl,
     delegateAddress: asString(agent.delegate_address) ?? asString(signer.delegate_address),
-    safeAddress: asString(identity.safe_address) ?? asString(agent.safe_address),
+    ...readStoredAccountAddress(identity, agent),
     chainId: typeof identity.chain_id === "number" ? identity.chain_id : void 0,
     network: asString(identity.network),
     x402BindingSigner: asString(signer.x402_binding_signer),
     agentBudget: Array.isArray(identity.agent_budget) ? identity.agent_budget : void 0
   };
 }
+function readStoredAccountAddress(identity, agent) {
+  const fresh = asString(identity.account_address) ?? asString(agent.account_address);
+  if (fresh) return { accountAddress: fresh, accountAddressKey: "account_address" };
+  const legacy = asString(identity.safe_address) ?? asString(agent.safe_address);
+  if (legacy) return { accountAddress: legacy, accountAddressKey: "safe_address" };
+  return {};
+}
 async function discoverSoleAgentDirectory(baseDir) {
   const root = defaultCredentialRoot(baseDir);
   let entries = [];
@@ -542,9 +549,9 @@ var init_runtime_manifest = __esm({
       mcpPackage: "@haven_ai/mcp",
       mcpVersion: MCP_VERSION,
       sdkPackage: "@haven_ai/sdk",
-      sdkVersion: "0.1.37-alpha.0",
+      sdkVersion: "0.2.1-alpha.0",
       signerPackage: "@haven_ai/signer",
-      signerVersion: "0.1.37-alpha.0",
+      signerVersion: "0.2.1-alpha.0",
       // Sourced from the SDK, never a literal (#1161). This field read '20.0.0'
       // while every package's `engines` said `>=24` and the docs said `>=24.0.0`,
       // so the guard that was supposed to enforce the floor waved Node v23 through
@@ -1432,7 +1439,7 @@ async function buildLocalMcpConsentInput(identityPath, signerPath) {
       apiKey: credentials.apiKey,
       apiUrl: credentials.apiUrl,
       agentId: credentials.agentId,
-      safeAddress: credentials.safeAddress,
+      safeAddress: credentials.accountAddress ?? credentials.safeAddress,
       delegateAddress: credentials.delegateAddress,
       chainId: credentials.chainId,
       allowanceSummary: credentials.allowanceSummary
@@ -2474,7 +2481,7 @@ async function buildSignerConsentInput(signerPath) {
   });
   return {
     delegateAddress: signer.delegateAddress,
-    safeAddress: credentials.safeAddress,
+    safeAddress: credentials.accountAddress ?? credentials.safeAddress,
     agentId: credentials.agentId,
     chainId: credentials.chainId,
     network: credentials.network,
@@ -2650,7 +2657,7 @@ async function installRuntime(input, deps = {}) {
   (signerProbe === void 0 || signerProbe.status === "ok");
   const restartRequired = configResult.restartRequired || restartRequiredForRuntime(runtime, deps.env);
   const errorCode = configResult.errorCode ?? (configResult.runtimeMcpMode === "local_stdio" ? localMcpErrorCode(signerCredentialReady, localMcpConsent, localMcpProbe?.status) : hostedMcpErrorCode(configResult.hostedConfigured, hostedProbe.status) ?? signerConsentErrorCode(signerCredentialReady, signerConsent) ?? signerProbeErrorCode(signerProbe));
-  const hostedProbeMessages = configResult.hostedConfigured && hostedProbe.status !== "ok" ? [`Hosted Haven MCP probe failed: ${hostedProbe.status}.`] : configResult.hostedConfigured ? ["Verified hosted Haven MCP tools with a read-only handshake."] : [];
+  const hostedProbeMessages = configResult.hostedConfigured && hostedProbe.status !== "ok" ? [`Hosted Haven MCP probe failed: ${hostedProbe.status}.`] : configResult.hostedConfigured ? ["Verified that the hosted Haven MCP tools endpoint responds to a read-only handshake."] : [];
   const signerProbeMessages = signerProbe ? signerProbe.status === "ok" ? ["Verified local Haven signer with a stdio handshake."] : [
     `Local Haven signer handshake failed: ${signerProbe.status}.`,
     `Re-run \`${connectorRerunCommand()}\` to repair the signer setup.`
@@ -3312,7 +3319,9 @@ async function finishRekey(options, deps = {}) {
     apiKey: options.newApiKey,
     delegateKey: pending.new_delegate_key,
     delegateAddress: pending.new_delegate_address,
-    safeAddress: stored.safeAddress ?? identity.safe_address ?? void 0,
+    // #2908: the stored value (already new-name-first) wins; the hosted
+    // identity's `account_address` twin before its deprecated `safe_address`.
+    accountAddress: stored.accountAddress ?? identity.account_address ?? identity.safe_address ?? void 0,
     chainId: stored.chainId ?? identity.chain_id ?? void 0,
     network: stored.network,
     agentBudget: stored.agentBudget,
@@ -3498,6 +3507,7 @@ var init_rekey_restart = __esm({
 // src/doctor.ts
 var doctor_exports = {};
 __export(doctor_exports, {
+  describeAccountAddressKey: () => describeAccountAddressKey,
   runDoctor: () => runDoctor,
   runRepair: () => runRepair
 });
@@ -3648,6 +3658,15 @@ async function readIdentity(directory) {
     return void 0;
   }
 }
+function describeAccountAddressKey(identity, signerFile) {
+  const files = [identity, signerFile];
+  const has = (key) => files.some((f) => typeof f?.[key] === "string" && f[key].trim() !== "");
+  if (has("account_address")) return "account address stored as account_address";
+  if (has("safe_address")) {
+    return "account address stored under the pre-#2908 name safe_address \u2014 still read; the next --rekey or setup rewrites it as account_address";
+  }
+  return "no account address stored";
+}
 async function checksForAgent(entry, input, deps) {
   const { directory, identity, sidecar } = entry;
   const checks = [];
@@ -3664,7 +3683,7 @@ async function checksForAgent(entry, input, deps) {
     id: "credentials",
     label: "Agent credentials",
     ok: credentialsOk,
-    detail: credentialsOk ? `identity.json and signer.json parse (agent ${identity?.agent_id ?? "unknown"})` : "identity.json or signer.json is missing or unparseable.",
+    detail: credentialsOk ? `identity.json and signer.json parse (agent ${identity?.agent_id ?? "unknown"}; ${describeAccountAddressKey(identity, signerFile)})` : "identity.json or signer.json is missing or unparseable.",
     ...credentialsOk ? {} : { repair: `Re-run the full setup with a fresh token: ${RERUN} --setup <token>.` }
   });
   if (!sidecar) {
@@ -3688,14 +3707,17 @@ async function checksForAgent(entry, input, deps) {
       ...matches ? {} : { repair: `Run: ${RERUN} --doctor --repair --runtime ${input.runtime} with the same HAVEN_*_SPEC variables set.` }
     });
   } else {
-    const matches = await installedRuntimeMatches(sidecar.runtime_directory, sidecar.cli_path);
+    const intact = await installedRuntimeMatchesVersions(sidecar.runtime_directory, sidecar.cli_path, {
+      signerVersion: sidecar.signer_version,
+      sdkVersion: sidecar.sdk_version
+    });
     const versionOk = sidecar.signer_version === MCP_RUNTIME_MANIFEST.signerVersion;
-    const ok = matches && versionOk;
+    const ok = intact && versionOk;
     checks.push({
       id: "signer_runtime",
       label: "Signer runtime (preinstalled wrapper)",
       ok,
-      detail: ok ? `Installed ${sidecar.signer_package}@${sidecar.signer_version} at ${sidecar.runtime_directory}` : matches ? `Installed version ${sidecar.signer_version} does not match the connector's pinned ${MCP_RUNTIME_MANIFEST.signerVersion}.` : `Runtime directory is stale or empty (${sidecar.runtime_directory}) \u2014 the CLI or package versions are missing.`,
+      detail: ok ? `Installed ${sidecar.signer_package}@${sidecar.signer_version} at ${sidecar.runtime_directory}` : intact ? `Installed version ${sidecar.signer_version} does not match the connector's pinned ${MCP_RUNTIME_MANIFEST.signerVersion} \u2014 intact, but outdated.` : `Runtime directory is stale or empty (${sidecar.runtime_directory}) \u2014 the CLI or package versions are missing.`,
       ...ok ? {} : { repair: `Run: ${RERUN} --doctor --repair --runtime ${input.runtime}` }
     });
   }
@@ -3708,9 +3730,9 @@ async function checksForAgent(entry, input, deps) {
       id: "hosted_mcp",
       label: "Hosted Haven MCP",
       ok: probe.status === "ok",
-      detail: probe.status === "ok" ? `Reachable and authorized (${hostedUrl}).` : `Probe failed: ${probe.status} (${hostedUrl}).`,
+      detail: probe.status === "ok" ? `MCP tools endpoint is reachable (${hostedUrl}).` : `MCP tools endpoint probe failed: ${probe.status} (${hostedUrl}).`,
       ...probe.status === "ok" ? {} : {
-        repair: probe.status === "unauthorized" ? `The stored API key was rejected \u2014 re-run the full setup with a fresh token: ${RERUN} --setup <token>.` : "Check network access to the hosted MCP URL, then re-run --doctor."
+        repair: "Check network access and runtime configuration for the hosted MCP URL, then re-run --doctor."
       }
     });
   } else {
@@ -3944,14 +3966,17 @@ async function runDoctor(input, deps = {}) {
       const identity = await readIdentity(entry.directory);
       const tombstone = await readAgentTombstone(entry.directory);
       const otherAgent = entry.agentId ?? basename(entry.directory);
-      const otherUrl = identity?.hosted_mcp_url ?? (identity?.api_url ? `${identity.api_url}/mcp` : void 0);
-      if (!identity?.api_key || !otherUrl) {
+      if (!identity?.api_key || !identity.api_url) {
         if (tombstone) retired.push(`${otherAgent} (retired ${tombstone.retired_at})`);
-        else unverifiable.push(`${otherAgent} (no stored key/URL to probe)`);
+        else unverifiable.push(`${otherAgent} (no stored key/API URL to probe)`);
         continue;
       }
       const suffix = tombstone ? " [tombstoned \u2014 key material still present]" : "";
-      const probe = await (deps.probeHosted ?? probeHostedMcpTools)(identity.api_key, otherUrl, deps.fetch);
+      const probe = await (deps.probeHostedIdentity ?? probeHostedAgentIdentity)(
+        identity.api_key,
+        identity.api_url,
+        deps.fetch
+      );
       if (probe.status === "ok") live.push({ label: `${otherAgent}${suffix}`, entry });
       else if (probe.status === "unauthorized") revoked.push(`${otherAgent}${suffix}`);
       else unverifiable.push(`${otherAgent} (${probe.status})${suffix}`);
@@ -4395,7 +4420,7 @@ async function pathExists2(path) {
 init_unwire();
 init_local_mcp_runtime();
 init_runtime_manifest();
-var CONNECTOR_VERSION = "0.1.37-alpha.0";
+var CONNECTOR_VERSION = "0.2.1-alpha.0";
 var CONNECT_OUTCOME_SCHEMA_VERSION = 1;
 var failureOutcomesByError = /* @__PURE__ */ new WeakMap();
 function failureOutcomeFor(runtimeHint, error) {
@@ -4571,7 +4596,7 @@ async function executeConnect(options, deps, trace) {
     apiKey: localApiKey,
     delegateKey: localKey.privateKey,
     delegateAddress: localKey.address,
-    safeAddress: setup.haven_wallet.address,
+    accountAddress: setup.haven_wallet.address,
     chainId: setup.haven_wallet.chain_id,
     network: setup.haven_wallet.network,
     agentBudget: setup.agent_budget.map((budget) => ({