@haven_ai/connect 0.2.1-alpha.0 → 0.4.0-alpha.0

package/dist/index.d.cts

@@ -170,10 +170,8 @@ interface AgentIdentity {
     id: string;
     name: string;
     status: string;
-    /** @deprecated #2908 — same value as `account_address`; the server drops it at #2914. */
-    safe_address: string | null;
-    /** #2908 — the account-vocabulary twin (not emitted by every server yet; read first, never required). */
-    account_address?: string | null;
+    /** The Haven account (smart account) address. The server emits this ONLY as of #2914 — `safe_address` is retired. */
+    account_address: string | null;
     delegate_address: string | null;
     chain_id: number | null;
     execution_rail: 'legacy' | 'delegation' | string;
@@ -738,7 +736,7 @@ type WiringCollisionResolution = {
     action: 'abort';
 };
 
-declare const CONNECTOR_VERSION = "0.2.1-alpha.0";
+declare const CONNECTOR_VERSION = "0.4.0-alpha.0";
 interface ConnectOptions {
     setupToken: string;
     apiBaseUrl: string;
@@ -883,6 +881,36 @@ interface ConnectOutcome {
      */
     superseded_agents_retired_locally?: boolean;
     retired_agent_ids?: readonly string[];
+    /**
+     * #3122, additive within schema_version 1. Every OTHER credential directory
+     * on this machine that still held key material when this run began — named
+     * BEFORE the first credential write (the same list the pre-write heads-up
+     * prints), with the account each can spend from, so a `--json` caller
+     * learns of the condition without parsing prose. "Live" here means "holds
+     * a stored API key locally" — no network call is made to ask the backend
+     * whether the key still authenticates (that is the doctor's probe). Always
+     * present on a completed run, `[]` on a clean machine; like
+     * `superseded_agent_ids`, an empty list from a root that could not be read
+     * is not proof of a clean machine.
+     */
+    existing_agents_before_write?: ReadonlyArray<{
+        agent_id: string;
+        account_address: string | null;
+    }>;
+    /**
+     * #3122, additive. Present only when this run took an MCP server name over
+     * from another agent's local binding record (`mcp-server-binding.json` in
+     * that directory): the previous holder, the backend it pointed at, when it
+     * was bound, and whether the backend changed — the case the backend cannot
+     * answer and the one that silently repoints a saved session.
+     */
+    server_name_rebound_from?: {
+        server_name: string;
+        agent_id: string;
+        api_url: string;
+        bound_at: string;
+        backend_changed: boolean;
+    };
     /**
      * #2091, additive within schema_version 1: `message` is the redacted human
      * refusal (automation used to get code + next_action and nothing to act
@@ -995,6 +1023,11 @@ declare function completionOutcome(input: {
     setupChallengeExpiresAt?: string;
     approvalRequired: boolean;
     approvalUrl?: string;
+    existingAgentsBeforeWrite?: ReadonlyArray<{
+        agent_id: string;
+        account_address: string | null;
+    }>;
+    serverNameReboundFrom?: ConnectOutcome['server_name_rebound_from'];
 }): ConnectOutcome;
 /**
  * The failure record for the `--json` contract.
@@ -1055,9 +1088,14 @@ interface ParsedCli {
     unwire?: {
         reason?: string;
         replacedBy?: string;
+        destroyKeyMaterial?: boolean;
     };
     /** Optional positional value of --unwire <dir> (else --name / --credentials-dir resolve it). */
     unwireDir?: string;
+    /** #3123: reclaim signer-runtime directories no credential directory references. */
+    pruneSignerRuntimes?: {
+        dryRun: boolean;
+    };
     /**
      * #1700: replace an agent's signing key on this machine. Two phases, because
      * the dashboard sits between them — `start` generates the key and prints its
@@ -1138,11 +1176,11 @@ declare function isConnectError(err: unknown): err is ConnectError;
 
 declare const MCP_RUNTIME_MANIFEST: {
     readonly mcpPackage: "@haven_ai/mcp";
-    readonly mcpVersion: "0.2.1-alpha.0";
+    readonly mcpVersion: "0.4.0-alpha.0";
     readonly sdkPackage: "@haven_ai/sdk";
-    readonly sdkVersion: "0.2.1-alpha.0";
+    readonly sdkVersion: "0.4.0-alpha.0";
     readonly signerPackage: "@haven_ai/signer";
-    readonly signerVersion: "0.2.1-alpha.0";
+    readonly signerVersion: "0.4.0-alpha.0";
     readonly minimumNodeVersion: "22.0.0";
     readonly supportedClients: readonly ["codex-cli", "codex-desktop", "claude-code"];
     readonly requiredTools: readonly string[];

package/dist/index.d.ts

@@ -170,10 +170,8 @@ interface AgentIdentity {
     id: string;
     name: string;
     status: string;
-    /** @deprecated #2908 — same value as `account_address`; the server drops it at #2914. */
-    safe_address: string | null;
-    /** #2908 — the account-vocabulary twin (not emitted by every server yet; read first, never required). */
-    account_address?: string | null;
+    /** The Haven account (smart account) address. The server emits this ONLY as of #2914 — `safe_address` is retired. */
+    account_address: string | null;
     delegate_address: string | null;
     chain_id: number | null;
     execution_rail: 'legacy' | 'delegation' | string;
@@ -738,7 +736,7 @@ type WiringCollisionResolution = {
     action: 'abort';
 };
 
-declare const CONNECTOR_VERSION = "0.2.1-alpha.0";
+declare const CONNECTOR_VERSION = "0.4.0-alpha.0";
 interface ConnectOptions {
     setupToken: string;
     apiBaseUrl: string;
@@ -883,6 +881,36 @@ interface ConnectOutcome {
      */
     superseded_agents_retired_locally?: boolean;
     retired_agent_ids?: readonly string[];
+    /**
+     * #3122, additive within schema_version 1. Every OTHER credential directory
+     * on this machine that still held key material when this run began — named
+     * BEFORE the first credential write (the same list the pre-write heads-up
+     * prints), with the account each can spend from, so a `--json` caller
+     * learns of the condition without parsing prose. "Live" here means "holds
+     * a stored API key locally" — no network call is made to ask the backend
+     * whether the key still authenticates (that is the doctor's probe). Always
+     * present on a completed run, `[]` on a clean machine; like
+     * `superseded_agent_ids`, an empty list from a root that could not be read
+     * is not proof of a clean machine.
+     */
+    existing_agents_before_write?: ReadonlyArray<{
+        agent_id: string;
+        account_address: string | null;
+    }>;
+    /**
+     * #3122, additive. Present only when this run took an MCP server name over
+     * from another agent's local binding record (`mcp-server-binding.json` in
+     * that directory): the previous holder, the backend it pointed at, when it
+     * was bound, and whether the backend changed — the case the backend cannot
+     * answer and the one that silently repoints a saved session.
+     */
+    server_name_rebound_from?: {
+        server_name: string;
+        agent_id: string;
+        api_url: string;
+        bound_at: string;
+        backend_changed: boolean;
+    };
     /**
      * #2091, additive within schema_version 1: `message` is the redacted human
      * refusal (automation used to get code + next_action and nothing to act
@@ -995,6 +1023,11 @@ declare function completionOutcome(input: {
     setupChallengeExpiresAt?: string;
     approvalRequired: boolean;
     approvalUrl?: string;
+    existingAgentsBeforeWrite?: ReadonlyArray<{
+        agent_id: string;
+        account_address: string | null;
+    }>;
+    serverNameReboundFrom?: ConnectOutcome['server_name_rebound_from'];
 }): ConnectOutcome;
 /**
  * The failure record for the `--json` contract.
@@ -1055,9 +1088,14 @@ interface ParsedCli {
     unwire?: {
         reason?: string;
         replacedBy?: string;
+        destroyKeyMaterial?: boolean;
     };
     /** Optional positional value of --unwire <dir> (else --name / --credentials-dir resolve it). */
     unwireDir?: string;
+    /** #3123: reclaim signer-runtime directories no credential directory references. */
+    pruneSignerRuntimes?: {
+        dryRun: boolean;
+    };
     /**
      * #1700: replace an agent's signing key on this machine. Two phases, because
      * the dashboard sits between them — `start` generates the key and prints its
@@ -1138,11 +1176,11 @@ declare function isConnectError(err: unknown): err is ConnectError;
 
 declare const MCP_RUNTIME_MANIFEST: {
     readonly mcpPackage: "@haven_ai/mcp";
-    readonly mcpVersion: "0.2.1-alpha.0";
+    readonly mcpVersion: "0.4.0-alpha.0";
     readonly sdkPackage: "@haven_ai/sdk";
-    readonly sdkVersion: "0.2.1-alpha.0";
+    readonly sdkVersion: "0.4.0-alpha.0";
     readonly signerPackage: "@haven_ai/signer";
-    readonly signerVersion: "0.2.1-alpha.0";
+    readonly signerVersion: "0.4.0-alpha.0";
     readonly minimumNodeVersion: "22.0.0";
     readonly supportedClients: readonly ["codex-cli", "codex-desktop", "claude-code"];
     readonly requiredTools: readonly string[];