premanmcp 0.10.3 → 0.10.4

package/bin/connect.js

@@ -1130,7 +1130,7 @@ export function headlessDiscovery(agent, serverName, instructions = []) {
  *
  * Never throws: a failed discovery must not fail the connect.
  */
-async function discoverEndpoints(args, agent, serverName) {
+async function discoverEndpoints(args, agent, serverName, blockedHere = "") {
   try {
     const before = await endpointCounts(args);
     if (before.registered) {
@@ -1142,7 +1142,10 @@ async function discoverEndpoints(args, agent, serverName) {
 
     const brief = await callPremanTool(args, "discover_endpoints_from_codebase", { base_path: "." });
     const spec = headlessDiscovery(agent, serverName, brief.instructions || []);
-    const blocker = spec && onPath(spec.bin) ? agentBlocker(agent.id) : "";
+    // Discovery has to read *this* repo, so it cannot be moved out of a directory
+    // that redirects it the way the check-in was — it can only be skipped, before
+    // it spends ten minutes proving what the self-test already found out.
+    const blocker = blockedHere || (spec && onPath(spec.bin) ? agentBlocker(agent.id) : "");
     if (!spec || !onPath(spec.bin) || blocker) {
       // Say why before printing homework: "here is a brief" reads as PreMan not
       // working, when the actual answer is one login away.
@@ -1442,11 +1445,11 @@ async function setUpPushTesting(args) {
  * Order follows what a new account needs to see: what PreMan found, then where to
  * watch it, then who to tell, then when to run it.
  */
-async function guidedFirstRun(args, agent, apiKey, serverName) {
+async function guidedFirstRun(args, agent, apiKey, serverName, { blockedHere = "" } = {}) {
   const assumeYes = args.has("--yes");
 
   step("Endpoints");
-  const counts = await discoverEndpoints(args, agent, serverName);
+  const counts = await discoverEndpoints(args, agent, serverName, blockedHere);
 
   if (counts.first) {
     step("First test");
@@ -1661,14 +1664,13 @@ export async function connectCommand(commandArgs) {
     return;
   }
 
-  if (
-    !(await establishCheckIn(args, agent, apiKey, {
-      serverName,
-      written,
-      serverConfig,
-      projectInstall,
-    }))
-  ) {
+  const checkIn = await establishCheckIn(args, agent, apiKey, {
+    serverName,
+    written,
+    serverConfig,
+    projectInstall,
+  });
+  if (!checkIn.linked) {
     // Still honour an explicitly-passed credential, but do not open a new prompt
     // on top of a connect that just told the user something went wrong.
     await captureDispatchCredential(args, agent, apiKey, { prompt: false });
@@ -1677,7 +1679,7 @@ export async function connectCommand(commandArgs) {
 
   process.stdout.write(`${MARK.ok()} Connected as ${agent.label}.\n`);
   if (!args.has("--no-guide")) {
-    await guidedFirstRun(args, agent, apiKey, serverName);
+    await guidedFirstRun(args, agent, apiKey, serverName, { blockedHere: checkIn.blockedHere });
   }
   await captureDispatchCredential(args, agent, apiKey);
 }
@@ -1744,8 +1746,10 @@ export function neutralCwd(candidates = [os.homedir(), os.tmpdir()]) {
  * end: the steps below are measured in minutes, and a note that explains what is
  * happening is worth nothing after it has stopped happening.
  *
- * Returns whether the check-in landed, and prints the troubleshooting block
- * itself when it did not.
+ * Returns whether the check-in landed and, when this directory redirects it, why
+ * nothing started here can use PreMan — the caller has its own agent to run once
+ * this is done. Prints the troubleshooting block itself when the link did not
+ * land.
  */
 async function establishCheckIn(
   args,
@@ -1754,9 +1758,11 @@ async function establishCheckIn(
   { serverName, written, serverConfig, projectInstall = false }
 ) {
   const notes = [];
-  // Set only when this directory would redirect the agent, and then it is where
-  // the agent gets started instead.
+  // Both set only when this directory redirects the agent: where it can be
+  // started instead, and why an agent left standing here cannot use PreMan at all.
   let elsewhere = null;
+  let blockedHere = "";
+  const done = (linked) => ({ linked, blockedHere });
   const ticker = pollTicker();
   const say = (text) => {
     ticker.end();
@@ -1781,7 +1787,7 @@ async function establishCheckIn(
       );
     }
     if (test.ok && status.authenticated && (await waitForConnection(args, apiKey, { timeoutMs: 15000 }))) {
-      return true;
+      return done(true);
     }
     note(
       test.ok
@@ -1806,6 +1812,12 @@ async function establishCheckIn(
           `directory forces: ${cliInvocation()} connect ${flag} --backend ${redirect.actual} ` +
           `(needs a key issued by it, and that API running).`
       );
+      // Linking is not the only thing this directory breaks: whatever runs here
+      // next gets the same redirected, unauthenticated server, and the callers
+      // that would start an agent in it need to hear so.
+      blockedHere =
+        `${redirect.path} sends ${agent.label} to ${redirect.actual} in this directory, ` +
+        `where this key is not valid.`;
 
       // The config we wrote is correct; the directory around it is not. Since the
       // server only reads the file it is standing in, everything this does next
@@ -1813,7 +1825,7 @@ async function establishCheckIn(
       const outside = neutralCwd();
       if (!outside) {
         notLinked(`Run '${cliInvocation()} connect' from your own project instead of this directory.`);
-        return false;
+        return done(false);
       }
 
       say(
@@ -1834,7 +1846,7 @@ async function establishCheckIn(
         retry.status?.authenticated &&
         (await waitForConnection(args, apiKey, { timeoutMs: 15000 }))
       ) {
-        return true;
+        return done(true);
       }
 
       if (projectInstall) {
@@ -1845,7 +1857,7 @@ async function establishCheckIn(
           `This --project config exists only here; started anywhere else, ` +
             `${agent.label} has no ${serverName} server to call.`
         );
-        return false;
+        return done(false);
       }
       elsewhere = outside;
     }
@@ -1867,7 +1879,7 @@ async function establishCheckIn(
     });
     if (launch.connected) {
       ticker.end();
-      return true;
+      return done(true);
     }
     if (launch.ran && !launch.interactive) {
       const why = lastLine(launch.output);
@@ -1896,7 +1908,7 @@ async function establishCheckIn(
 
   if (await waitForConnection(args, apiKey, { onPoll: ticker.tick })) {
     ticker.end();
-    return true;
+    return done(true);
   }
 
   say(
@@ -1907,5 +1919,5 @@ async function establishCheckIn(
       `  - Then ask ${agent.label} to "run preman_status" — it links on its first PreMan call.\n` +
       `  - Then: ${cliInvocation()} connect --agent ${agent.id.replace("_", "-")}\n`
   );
-  return false;
+  return done(false);
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "premanmcp",
-  "version": "0.10.3",
+  "version": "0.10.4",
   "description": "Turn APIs into agent-callable MCP tools with auth, testing, and audit logs",
   "type": "module",
   "bin": {