Signet should support one trusted Signet instance serving every harness the user runs, even when those harnesses run on other machines. The product shape is:
Run Signet once. Point every connector at it with
SIGNET_DAEMON_URL
andSIGNET_API_KEY
.
The daemon remains the authority boundary: source truth, memory policy, identity, provenance, session ingestion, search, and background maintenance live there. Harness connectors should be small edge adapters that install into a harness, forward session events, expose Signet tools, and call the daemon over a stable API.
Distribution model #
Each harness connector should be its own npm package, for example:
@signetai/connector-pi
@signetai/connector-codex
@signetai/connector-opencode
@signetai/connector-claude-code
The source workspace package names may remain @signet/*
; release staging
rewrites public npm artifacts to the @signetai/*
scope.
Connector packages must remain directly installable for portable use:
npx -y @signetai/connector-pi install \
--url https://signet-home.tailnet:3850 \
--api-key sig_sk_... \
--agent-id pi-work-laptop
The Signet CLI may wrap these packages for the local/common path:
signet connector install pi
signet connector install pi --url https://signet-home.tailnet:3850 --api-key sig_sk_... --agent-id pi-work-laptop
Shared behavior belongs in the connector-base package (@signet/connector-base
in source, published as @signetai/connector-base
): config , daemon client defaults, API-key handling, request envelopes, timeouts, retries, health checks, and common Signet tool contracts. Harness-specific packages should own only installation and runtime glue required by that harness.
Auth model #
The default auth primitive is a simple API key. This is intentionally boring: remote connector setup should not require OAuth, a cloud account, or a pairing protocol for V1.
The CLI must be able to generate connector API keys:
signet api-key create --name "work laptop pi" --connector pi --agent-id pi-work-laptop
signet api-key list
signet api-key revoke <id-or-prefix>
The daemon prints the raw key once and stores only a hash:
API key created:
name: work laptop pi
id: key_...
prefix: ...
key: sig_sk_...
role: agent
connector: pi
Save this key now. It will not be shown again.
Use `--json` when automation needs structured fields such as `agentId`,
`scope`, `permissions`, and `expiresAt`.
Connector requests authenticate with bearer auth:
Authorization: Bearer sig_sk_...
X-Signet-Harness: pi
X-Signet-Connector-Version: 0.140.0
The public API-key metadata shape should be named, scoped, and revocable. The
underlying database row also stores the secret verifier as key_hash
; the raw key is never stored.
type ApiKeyRecord = {
id: string;
prefix: string;
name: string;
role: "admin" | "operator" | "agent" | "readonly";
scope: { project?: string; agent?: string; user?: string };
permissions: string[];
connector: string | null;
harness: string | null;
agentId: string | null;
allowedProjects: string[];
createdAt: string;
lastUsedAt: string | null;
revokedAt: string | null;
expiresAt: string | null;
};
The user-facing model is still just a URL and key. Scope and permissions are the safety rails, not the main setup ceremony.
Request context #
Every remote connector request should carry enough context for the daemon to scope data, attribute events, and preserve provenance:
{
"harness": "pi",
"connectorId": "conn_...",
"agentId": "nicholai/pi",
"machineId": "work-laptop",
"sessionKey": "...",
"project": {
"cwd": "/Users/nicholai/signetai",
"gitRemote": "git@github.com:Signet-AI/signetai.git",
"gitRoot": "..."
}
}
Remote filesystem paths are evidence, not portable identity. Where possible,
project identity should prefer repository metadata such as git remote, root
fingerprint, and declared workspace name over raw cwd
strings.
Transport #
V1 should use HTTP APIs. WebSocket support can be added later for live context pushes, revocation, status streaming, or long-running connector sessions.
The same connector should work against:
http://127.0.0.1:3850
https://signet-home.tailnet:3850
https://future-relay.signet.ai/...
Cloud relay and hosted Signet Cloud are not required for the first remote connector milestone. Tailnet/LAN/self-hosted HTTPS is enough to prove the model.
Design principle #
Connectors are disposable stateless edge adapters. The Signet daemon is the policy engine, authority boundary, source index, memory substrate, and session continuity layer.