@haven_ai/connect 0.3.0-alpha.0 → 0.5.0-alpha.1

package/dist/index.d.cts

@@ -176,7 +176,14 @@ interface AgentIdentity {
     chain_id: number | null;
     execution_rail: 'legacy' | 'delegation' | string;
 }
-declare function createConnectApiClient(baseUrl: string, fetchImpl?: typeof fetch): ConnectApiClient;
+/**
+ * @param clientIdentity #3303: `@haven_ai/connect/<version>`, sent as
+ *   `X-Haven-Client` on every request so the backend can tell an outdated
+ *   connector what to run. Passed in by the callers that own
+ *   `CONNECTOR_VERSION` (`runtime.ts` imports this file, so it cannot be
+ *   imported here).
+ */
+declare function createConnectApiClient(baseUrl: string, fetchImpl?: typeof fetch, clientIdentity?: string): ConnectApiClient;
 
 interface LocalDelegateKey {
     privateKey: string;
@@ -736,7 +743,7 @@ type WiringCollisionResolution = {
     action: 'abort';
 };
 
-declare const CONNECTOR_VERSION = "0.3.0-alpha.0";
+declare const CONNECTOR_VERSION = "0.5.0-alpha.1";
 interface ConnectOptions {
     setupToken: string;
     apiBaseUrl: string;
@@ -881,6 +888,45 @@ interface ConnectOutcome {
      */
     superseded_agents_retired_locally?: boolean;
     retired_agent_ids?: readonly string[];
+    /**
+     * #3259, additive within schema_version 1: present only on a replace run
+     * where a retired directory's surviving ledger record could NOT be written —
+     * agent id → errno code (or `mirror_write_failed`). The directory is still
+     * retired (tombstoned in place, key files removed) and counts in
+     * `retired_agent_ids`; only `--doctor`'s view after the directory is deleted
+     * is lost.
+     */
+    retirement_mirror_errors?: Readonly<Record<string, string>>;
+    /**
+     * #3122, additive within schema_version 1. Every OTHER credential directory
+     * on this machine that still held key material when this run began — named
+     * BEFORE the first credential write (the same list the pre-write heads-up
+     * prints), with the account each can spend from, so a `--json` caller
+     * learns of the condition without parsing prose. "Live" here means "holds
+     * a stored API key locally" — no network call is made to ask the backend
+     * whether the key still authenticates (that is the doctor's probe). Always
+     * present on a completed run, `[]` on a clean machine; like
+     * `superseded_agent_ids`, an empty list from a root that could not be read
+     * is not proof of a clean machine.
+     */
+    existing_agents_before_write?: ReadonlyArray<{
+        agent_id: string;
+        account_address: string | null;
+    }>;
+    /**
+     * #3122, additive. Present only when this run took an MCP server name over
+     * from another agent's local binding record (`mcp-server-binding.json` in
+     * that directory): the previous holder, the backend it pointed at, when it
+     * was bound, and whether the backend changed — the case the backend cannot
+     * answer and the one that silently repoints a saved session.
+     */
+    server_name_rebound_from?: {
+        server_name: string;
+        agent_id: string;
+        api_url: string;
+        bound_at: string;
+        backend_changed: boolean;
+    };
     /**
      * #2091, additive within schema_version 1: `message` is the redacted human
      * refusal (automation used to get code + next_action and nothing to act
@@ -990,9 +1036,16 @@ declare function completionOutcome(input: {
     /** #2551: only a replace run sets these; see the outcome fields' doc comments. */
     supersededAgentsRetiredLocally?: boolean;
     retiredAgentIds?: readonly string[];
+    /** #3259: only set when a retirement's ledger mirror failed. */
+    retirementMirrorErrors?: Readonly<Record<string, string>>;
     setupChallengeExpiresAt?: string;
     approvalRequired: boolean;
     approvalUrl?: string;
+    existingAgentsBeforeWrite?: ReadonlyArray<{
+        agent_id: string;
+        account_address: string | null;
+    }>;
+    serverNameReboundFrom?: ConnectOutcome['server_name_rebound_from'];
 }): ConnectOutcome;
 /**
  * The failure record for the `--json` contract.
@@ -1053,9 +1106,14 @@ interface ParsedCli {
     unwire?: {
         reason?: string;
         replacedBy?: string;
+        destroyKeyMaterial?: boolean;
     };
     /** Optional positional value of --unwire <dir> (else --name / --credentials-dir resolve it). */
     unwireDir?: string;
+    /** #3123: reclaim signer-runtime directories no credential directory references. */
+    pruneSignerRuntimes?: {
+        dryRun: boolean;
+    };
     /**
      * #1700: replace an agent's signing key on this machine. Two phases, because
      * the dashboard sits between them — `start` generates the key and prints its
@@ -1136,11 +1194,11 @@ declare function isConnectError(err: unknown): err is ConnectError;
 
 declare const MCP_RUNTIME_MANIFEST: {
     readonly mcpPackage: "@haven_ai/mcp";
-    readonly mcpVersion: "0.3.0-alpha.0";
+    readonly mcpVersion: "0.5.0-alpha.1";
     readonly sdkPackage: "@haven_ai/sdk";
-    readonly sdkVersion: "0.3.0-alpha.0";
+    readonly sdkVersion: "0.5.0-alpha.1";
     readonly signerPackage: "@haven_ai/signer";
-    readonly signerVersion: "0.3.0-alpha.0";
+    readonly signerVersion: "0.5.0-alpha.1";
     readonly minimumNodeVersion: "22.0.0";
     readonly supportedClients: readonly ["codex-cli", "codex-desktop", "claude-code"];
     readonly requiredTools: readonly string[];

package/dist/index.d.ts

@@ -176,7 +176,14 @@ interface AgentIdentity {
     chain_id: number | null;
     execution_rail: 'legacy' | 'delegation' | string;
 }
-declare function createConnectApiClient(baseUrl: string, fetchImpl?: typeof fetch): ConnectApiClient;
+/**
+ * @param clientIdentity #3303: `@haven_ai/connect/<version>`, sent as
+ *   `X-Haven-Client` on every request so the backend can tell an outdated
+ *   connector what to run. Passed in by the callers that own
+ *   `CONNECTOR_VERSION` (`runtime.ts` imports this file, so it cannot be
+ *   imported here).
+ */
+declare function createConnectApiClient(baseUrl: string, fetchImpl?: typeof fetch, clientIdentity?: string): ConnectApiClient;
 
 interface LocalDelegateKey {
     privateKey: string;
@@ -736,7 +743,7 @@ type WiringCollisionResolution = {
     action: 'abort';
 };
 
-declare const CONNECTOR_VERSION = "0.3.0-alpha.0";
+declare const CONNECTOR_VERSION = "0.5.0-alpha.1";
 interface ConnectOptions {
     setupToken: string;
     apiBaseUrl: string;
@@ -881,6 +888,45 @@ interface ConnectOutcome {
      */
     superseded_agents_retired_locally?: boolean;
     retired_agent_ids?: readonly string[];
+    /**
+     * #3259, additive within schema_version 1: present only on a replace run
+     * where a retired directory's surviving ledger record could NOT be written —
+     * agent id → errno code (or `mirror_write_failed`). The directory is still
+     * retired (tombstoned in place, key files removed) and counts in
+     * `retired_agent_ids`; only `--doctor`'s view after the directory is deleted
+     * is lost.
+     */
+    retirement_mirror_errors?: Readonly<Record<string, string>>;
+    /**
+     * #3122, additive within schema_version 1. Every OTHER credential directory
+     * on this machine that still held key material when this run began — named
+     * BEFORE the first credential write (the same list the pre-write heads-up
+     * prints), with the account each can spend from, so a `--json` caller
+     * learns of the condition without parsing prose. "Live" here means "holds
+     * a stored API key locally" — no network call is made to ask the backend
+     * whether the key still authenticates (that is the doctor's probe). Always
+     * present on a completed run, `[]` on a clean machine; like
+     * `superseded_agent_ids`, an empty list from a root that could not be read
+     * is not proof of a clean machine.
+     */
+    existing_agents_before_write?: ReadonlyArray<{
+        agent_id: string;
+        account_address: string | null;
+    }>;
+    /**
+     * #3122, additive. Present only when this run took an MCP server name over
+     * from another agent's local binding record (`mcp-server-binding.json` in
+     * that directory): the previous holder, the backend it pointed at, when it
+     * was bound, and whether the backend changed — the case the backend cannot
+     * answer and the one that silently repoints a saved session.
+     */
+    server_name_rebound_from?: {
+        server_name: string;
+        agent_id: string;
+        api_url: string;
+        bound_at: string;
+        backend_changed: boolean;
+    };
     /**
      * #2091, additive within schema_version 1: `message` is the redacted human
      * refusal (automation used to get code + next_action and nothing to act
@@ -990,9 +1036,16 @@ declare function completionOutcome(input: {
     /** #2551: only a replace run sets these; see the outcome fields' doc comments. */
     supersededAgentsRetiredLocally?: boolean;
     retiredAgentIds?: readonly string[];
+    /** #3259: only set when a retirement's ledger mirror failed. */
+    retirementMirrorErrors?: Readonly<Record<string, string>>;
     setupChallengeExpiresAt?: string;
     approvalRequired: boolean;
     approvalUrl?: string;
+    existingAgentsBeforeWrite?: ReadonlyArray<{
+        agent_id: string;
+        account_address: string | null;
+    }>;
+    serverNameReboundFrom?: ConnectOutcome['server_name_rebound_from'];
 }): ConnectOutcome;
 /**
  * The failure record for the `--json` contract.
@@ -1053,9 +1106,14 @@ interface ParsedCli {
     unwire?: {
         reason?: string;
         replacedBy?: string;
+        destroyKeyMaterial?: boolean;
     };
     /** Optional positional value of --unwire <dir> (else --name / --credentials-dir resolve it). */
     unwireDir?: string;
+    /** #3123: reclaim signer-runtime directories no credential directory references. */
+    pruneSignerRuntimes?: {
+        dryRun: boolean;
+    };
     /**
      * #1700: replace an agent's signing key on this machine. Two phases, because
      * the dashboard sits between them — `start` generates the key and prints its
@@ -1136,11 +1194,11 @@ declare function isConnectError(err: unknown): err is ConnectError;
 
 declare const MCP_RUNTIME_MANIFEST: {
     readonly mcpPackage: "@haven_ai/mcp";
-    readonly mcpVersion: "0.3.0-alpha.0";
+    readonly mcpVersion: "0.5.0-alpha.1";
     readonly sdkPackage: "@haven_ai/sdk";
-    readonly sdkVersion: "0.3.0-alpha.0";
+    readonly sdkVersion: "0.5.0-alpha.1";
     readonly signerPackage: "@haven_ai/signer";
-    readonly signerVersion: "0.3.0-alpha.0";
+    readonly signerVersion: "0.5.0-alpha.1";
     readonly minimumNodeVersion: "22.0.0";
     readonly supportedClients: readonly ["codex-cli", "codex-desktop", "claude-code"];
     readonly requiredTools: readonly string[];