@haven_ai/cli 0.0.0-dev.202609051302.7cc48d5 → 0.0.0-dev.202609051933.cc65a9d

package/README.md

@@ -60,8 +60,45 @@ haven agents rotate-key <id>             # new API key, shown once
 haven agents rename <id> <name>
 haven wallets rename <id> <name>
 haven contacts add <name> <address> | contacts remove <id>
+
+# set an agent up without the dashboard modal (#2527)
+haven agents connect --name <name> --budget <amount> --token USDC --period <minutes>
+haven agents connect --name <name> --budget 25 --token USDC --period 1440 --run
+haven agents connect --status <setupId> [--wait]
 ```
 
+### `haven agents connect`
+
+Does what the dashboard's connect modal does, from a terminal: creates the
+setup and prints the connector command, the approval link, and when the setup
+expires. `--budget` is in **whole tokens** as you would say it (`25` is 25
+USDC); the CLI reads the token's decimals from your wallet's own balances and
+converts, and it **refuses** an amount with more precision than the token has
+rather than rounding it away.
+
+The connector command is **printed, never composed** — it is the same string
+the dashboard shows for the same setup, because both render what the backend
+built. `--run` executes it for you as a child process with exactly `--json`
+appended and nothing else changed, streams the connector's output, and puts the
+thing you have to act on first.
+
+If the connector refuses — it cannot tell which runtime to wire, or the machine
+is already wired to a different agent — you get **exit 4** with the refusal
+object intact, including any ids or suggested name it carried. That is a
+message to relay to your user, not a problem to solve: `haven agents connect`
+deliberately has no `--replace` and no `--name` for the connector, because
+choosing between replacing an existing wiring and installing alongside it is
+the human's decision.
+
+Two flags the issue sketched and this does not have, so you are not left
+looking for them: **`--recipient`** (a recipient pin lives in the delegation's
+caveat enforcers and is set when the human approves the budget — no API field
+takes one here) and **`haven agents create`** (`POST /agents` requires a
+delegate address, and a CLI an agent drives must never hold a signing key —
+`connect` is the path that generates one locally, on your machine).
+
+Approving the budget stays with the human, in the browser, every time.
+
 Add `--json` to any read command for machine-readable output:
 
 ```bash

package/dist/cli.cjs

@@ -4,6 +4,7 @@
 var promises = require('fs/promises');
 var os = require('os');
 var path = require('path');
+var child_process = require('child_process');
 var readline = require('readline');
 
 // src/args.ts
@@ -18,11 +19,24 @@ var VALUE_FLAGS = /* @__PURE__ */ new Set([
   "--format",
   "--from",
   "--to",
-  "--company"
+  "--company",
+  "--name",
+  "--budget",
+  "--token",
+  "--period",
+  "--status"
 ]);
 function parseArgs(argv) {
   const positionals = [];
-  const flags = { json: false, help: false, version: false, yes: false, noWait: false };
+  const flags = {
+    json: false,
+    help: false,
+    version: false,
+    yes: false,
+    noWait: false,
+    run: false,
+    wait: false
+  };
   for (let i = 0; i < argv.length; i += 1) {
     const arg = argv[i];
     if (arg === "--json") flags.json = true;
@@ -30,13 +44,23 @@ function parseArgs(argv) {
     else if (arg === "--version" || arg === "-v") flags.version = true;
     else if (arg === "--yes" || arg === "-y") flags.yes = true;
     else if (arg === "--no-wait") flags.noWait = true;
+    else if (arg === "--run") flags.run = true;
+    else if (arg === "--wait") flags.wait = true;
     else if (VALUE_FLAGS.has(arg)) {
       const value = argv[++i];
       if (value === void 0 || value.startsWith("--")) {
         throw new Error(`Missing value for ${arg}`);
       }
       if (arg === "--api") flags.api = value;
-      else if (arg === "--email") flags.email = value;
+      else if (arg === "--name") flags.name = value;
+      else if (arg === "--budget") flags.budget = value;
+      else if (arg === "--token") flags.token = value;
+      else if (arg === "--status") flags.status = value;
+      else if (arg === "--period") {
+        const n = Number(value);
+        if (!Number.isInteger(n) || n < 0) throw new Error("--period must be a whole number of minutes");
+        flags.period = n;
+      } else if (arg === "--email") flags.email = value;
       else if (arg === "--safe") flags.safe = value;
       else if (arg === "--agent") flags.agent = value;
       else if (arg === "--limit") {
@@ -357,7 +381,7 @@ ${failure.hint}` : failure.message);
 }
 
 // src/agent-guidance-text.ts
-var HAVEN_AGENT_RUNBOOK_MD = "# Haven for agents \u2014 set your user up to let you pay\n\nYou are an AI agent whose user has no Haven account yet, or has one but has not connected you.\n\n> Links below are paths on this same host: resolve them against the URL you fetched this file from.\n\n## What Haven is, in three sentences\n\nYour user gives you a **budget on their own account** \u2014 not their wallet, and not a key to their funds. The budget is a delegation they sign, enforced on-chain: a payment over it, to the wrong recipient, or past its expiry is refused at execution time, not by a dashboard promise. Haven constructs and relays the payments; you get an agent credential and a signing key made on your machine, and your user can revoke the budget without you and without Haven.\n\n## The sequence\n\nFour of the six steps are your user's \u2014 each needs a human signature or a human decision. The rest is yours. If they already have a funded account, start at step 3.\n\n1. **HUMAN \u2014 create the account.** Name, email, password, then a passkey (Face ID / Touch ID) or a wallet. Never offer to enter any of it: you must not have their password, and the passkey is bound to their device. With a terminal, `npx @haven_ai/cli login` afterwards gets you a scoped session for steps 3-4 \u2014 they approve a code in the browser, you never hold their password. It can set up agents and read the account; it cannot sign, approve a budget, move funds, or rotate any agent's keys.\n2. **HUMAN \u2014 fund it.** USDC on Base, to the address the dashboard shows.\n3. **HUMAN \u2014 create the agent, set its budget**, and paste you the **setup prompt** it hands back.\n4. **YOU \u2014 run the connector command** in that prompt (below). It makes your signing key locally, registering only the public address.\n5. **HUMAN \u2014 approve the budget** with their passkey, in the Haven tab they created the agent in: it advances to the approval step by itself once your run registers.\n6. **YOU \u2014 verify, then pay.**\n\n## Hand-off scripts\n\nSend these as your own message, `<host>` replaced by the host you fetched this file from. Say what you cannot do, not only what they must.\n\n**Before signup** (step 1):\n\n> I can do everything except the parts that need your signature. Please open `<host>/signup?next=/agents&via=agent` \u2014 name, email, password, then a passkey (Face ID / Touch ID) or a wallet. That is your account's key: I should not have it, and I will never ask for your password. Already have one? `<host>/login?next=/agents`.\n\n**At the passkey step:**\n\n> The passkey must be made on your own device \u2014 it is what keeps the account yours, so nobody, Haven included, can move your funds without you. If this browser cannot, open `<host>/onboarding?next=/agents` on your phone and finish there.\n\n**At funding** (step 2):\n\n> Your Haven account needs USDC on Base before I can pay for anything \u2014 USDC only, no ETH: Haven sponsors the gas. The dashboard shows the address to send it to; a small amount first is fine.\n\n**At the budget** (step 3):\n\n> On `<host>/agents`, create an agent for me and set a budget \u2014 say 25 USDC per day. That is the limit I cannot exceed. It hands back a setup prompt: paste it to me and I run it here.\n\n**At budget approval** (step 5) \u2014 the moment your run reports that approval is required, before anything else. Send the first if your run carried `approval.url`, the second if it did not.\n\n> Setup is done on my side. Approve the budget here: <approval.url>. Approve it with your passkey; nothing can be spent until you do.\n\n> Setup is done on my side. Go back to the Haven tab where you created the agent \u2014 it should now be asking you to approve the budget. Approve it with your passkey; nothing can be spent until you do.\n\n## What you run\n\nThe setup prompt carries a **connector command** shaped like this:\n\n```\nnpx -y @haven_ai/connect@<channel> --setup EXAMPLE-SETUP-TOKEN-NOT-REAL --api <api-url> --ack-local-tools\n```\n\nRun the prompt's version, not this one: the token is one-time, the API URL is the backend's own, and `<channel>` is the npm tag your prompt names \u2014 never a tag you pick. The rules below come from that prompt, so \"me\" in them is your user, not Haven.\n\n- If you are an AI agent running this command yourself rather than a human pasting it, you should append --json: the connector then emits one machine-readable, secret-free result object on stdout with progress on stderr, and returns promptly instead of blocking while it waits for the budget approval.\n- When a --json outcome reports approval.required: true, your first action must be to relay the approval instruction to me in your own reply \u2014 if the outcome carries approval.url, give me that link; otherwise tell me to return to Haven and approve this agent's budget \u2014 before verifying the connection, restarting anything, or any other step. Never build that link yourself: relay the one the outcome gave you or none at all. Any restart the outcome asks for is a separate instruction to give me afterwards, once the approval is done.\n- If you ran the command without --json, the connector waits for the approval itself and prints its next steps when it finishes: relay the budget-approval instruction to me \u2014 the approval link if those steps printed one, otherwise that you need to return to Haven and approve this agent's budget \u2014 only if those printed next steps still ask for it. If they report the budget as already approved, there is nothing for me to approve.\n- Only two changes to the command above are permitted, and no others: appending --json, and \u2014 only if the connector refuses because it could not determine the agent runtime \u2014 re-running it once with --runtime <name> added, naming the harness you are running in, using one of the values that refusal lists. Never invent a runtime name and never change anything else.\n- Do not print private keys, API keys, credential file contents, or config secrets in chat or logs.\n\nIf the approval wait times out, nothing is lost \u2014 your agent is registered and the budget is still waiting to be approved. Send your user the `approval.url` your run reported, or, if it carried none, ask them to finish it in that same Haven tab. The outcome carries no setup id, so never assemble an approval link out of parts \u2014 relay the whole one it gave you or none at all.\n\n## How to verify\n\nCall `haven_get_agent`, one of the Haven MCP tools the connector wires into your runtime in step 4. It returns identity plus `spend_authority_readiness`:\n\n- `ready` \u2014 a budget is live; you can pay.\n- `needs_approval` \u2014 the connector finished, nobody approved yet. Ask your user again, in their Haven tab; there is no queue to wait in.\n- `revoked` \u2014 the credential is not active; ask your user to create a new agent.\n\n`ready` covers hosted identity and the budget only, not your local signer. Check that with `npx -y @haven_ai/connect@<channel> --doctor`, the same tag your prompt named \u2014 a separate command, so the two-changes rule does not bind it.\n\n## If you cannot open a browser\n\nNothing here needs you to. Steps 1-3 are links: hand your user the full `<host>/\u2026` URL and ask them to say when it is done. Step 5 is a link only when your run reported one in `approval.url` \u2014 otherwise it is the tab they already have open, as above. Then poll `haven_get_agent` until it reads `ready`. Do not route around the sign-in wall \u2014 it makes the account theirs, not yours.\n\n## Vocabulary\n\n| Term | What it is |\n|---|---|\n| **setup prompt** | The text the dashboard hands your user to paste to you. Carries the command and its rules. |\n| **connector command** | The `npx -y @haven_ai/connect@\u2026` line you run. One-time token, one use. |\n| **agent credential** | Your API key (`sk_agent_\u2026`), written to `~/.haven`. It identifies you; alone it cannot move money. |\n| **delegate key** | Your signing key, made on this machine and never sent anywhere. |\n| **budget** | The on-chain delegation your user signed. It authorises the payment; Haven constructs and relays it. |\n\nNext: [your agent hit a 402](/402.md) \xB7 [everything agent-readable](/llms.txt)\n";
+var HAVEN_AGENT_RUNBOOK_MD = "# Haven for agents \u2014 set your user up to let you pay\n\nYou are an AI agent whose user has no Haven account yet, or has one but has not connected you.\n\n> Links below are paths on this same host: resolve them against the URL you fetched this file from.\n\n## What Haven is, in three sentences\n\nYour user gives you a **budget on their own account** \u2014 not their wallet, and not a key to their funds. The budget is a delegation they sign, enforced on-chain: a payment over it, to the wrong recipient, or past its expiry is refused at execution time, not by a dashboard promise. Haven constructs and relays the payments; you get an agent credential and a signing key made on your machine, and your user can revoke the budget without you and without Haven.\n\n## The sequence\n\nFour of the six steps are your user's \u2014 each needs a human signature or a human decision. The rest is yours. If they already have a funded account, start at step 3.\n\n1. **HUMAN \u2014 create the account.** Name, email, password, then a passkey (Face ID / Touch ID) or a wallet. Never offer to enter any of it: you must not have their password, and the passkey is bound to their device. With a terminal, `npx @haven_ai/cli login` afterwards gets you a scoped session for steps 3-4 \u2014 they approve a code in the browser, you never hold their password. It can set up agents and read the account; it cannot sign, approve a budget, move funds, or rotate any agent's keys.\n2. **HUMAN \u2014 fund it.** USDC on Base, to the address the dashboard shows.\n3. **HUMAN \u2014 create the agent, set its budget**, and paste you the **setup prompt** it hands back. With a CLI session (step 1) you can do this step yourself: `haven agents connect --name <n> --budget <amount> --token USDC --period <minutes>` prints the same connector command and approval link; add `--run` to do step 4 too.\n4. **YOU \u2014 run the connector command** in that prompt (below). It makes your signing key locally, registering only the public address.\n5. **HUMAN \u2014 approve the budget** with their passkey, in the Haven tab they created the agent in: it advances to the approval step by itself once your run registers.\n6. **YOU \u2014 verify, then pay.**\n\n## Hand-off scripts\n\nSend these as your own message, `<host>` replaced by the host you fetched this file from. Say what you cannot do, not only what they must.\n\n**Before signup** (step 1):\n\n> I can do everything except the parts that need your signature. Please open `<host>/signup?next=/agents&via=agent` \u2014 name, email, password, then a passkey (Face ID / Touch ID) or a wallet. That is your account's key: I should not have it, and I will never ask for your password. Already have one? `<host>/login?next=/agents`.\n\n**At the passkey step:**\n\n> The passkey must be made on your own device \u2014 it is what keeps the account yours, so nobody, Haven included, can move your funds without you. If this browser cannot, open `<host>/onboarding?next=/agents` on your phone and finish there.\n\n**At funding** (step 2):\n\n> Your Haven account needs USDC on Base before I can pay for anything \u2014 USDC only, no ETH: Haven sponsors the gas. The dashboard shows the address to send it to; a small amount first is fine.\n\n**At the budget** (step 3):\n\n> On `<host>/agents`, create an agent for me and set a budget \u2014 say 25 USDC per day. That is the limit I cannot exceed. It hands back a setup prompt: paste it to me and I run it here.\n\n**At budget approval** (step 5) \u2014 the moment your run reports that approval is required, before anything else. Send the first if your run carried `approval.url`, the second if it did not.\n\n> Setup is done on my side. Approve the budget here: <approval.url>. Approve it with your passkey; nothing can be spent until you do.\n\n> Setup is done on my side. Go back to the Haven tab where you created the agent \u2014 it should now be asking you to approve the budget. Approve it with your passkey; nothing can be spent until you do.\n\n## What you run\n\nThe setup prompt carries a **connector command** shaped like this:\n\n```\nnpx -y @haven_ai/connect@<channel> --setup EXAMPLE-SETUP-TOKEN-NOT-REAL --api <api-url> --ack-local-tools\n```\n\nRun the prompt's version, not this one: the token is one-time, the API URL is the backend's own, and `<channel>` is the npm tag your prompt names \u2014 never a tag you pick. The rules below come from that prompt, so \"me\" in them is your user, not Haven.\n\n- If you are an AI agent running this command yourself rather than a human pasting it, you should append --json: the connector then emits one machine-readable, secret-free result object on stdout with progress on stderr, and returns promptly instead of blocking while it waits for the budget approval.\n- When a --json outcome reports approval.required: true, your first action must be to relay the approval instruction to me in your own reply \u2014 if the outcome carries approval.url, give me that link; otherwise tell me to return to Haven and approve this agent's budget \u2014 before verifying the connection, restarting anything, or any other step. Never build that link yourself: relay the one the outcome gave you or none at all. Any restart the outcome asks for is a separate instruction to give me afterwards, once the approval is done.\n- If you ran the command without --json, the connector waits for the approval itself and prints its next steps when it finishes: relay the budget-approval instruction to me \u2014 the approval link if those steps printed one, otherwise that you need to return to Haven and approve this agent's budget \u2014 only if those printed next steps still ask for it. If they report the budget as already approved, there is nothing for me to approve.\n- Only two changes to the command above are permitted, and no others: appending --json, and \u2014 only if the connector refuses because it could not determine the agent runtime \u2014 re-running it once with --runtime <name> added, naming the harness you are running in, using one of the values that refusal lists. Never invent a runtime name and never change anything else.\n- Do not print private keys, API keys, credential file contents, or config secrets in chat or logs.\n\nIf the approval wait times out, nothing is lost \u2014 your agent is registered and the budget is still waiting to be approved. Send your user the `approval.url` your run reported, or, if it carried none, ask them to finish it in that same Haven tab. The outcome carries no setup id, so never assemble an approval link out of parts \u2014 relay the whole one it gave you or none at all.\n\n## How to verify\n\nCall `haven_get_agent`, one of the Haven MCP tools the connector wires into your runtime in step 4. It returns identity plus `spend_authority_readiness`:\n\n- `ready` \u2014 a budget is live; you can pay.\n- `needs_approval` \u2014 the connector finished, nobody approved yet. Ask your user again, in their Haven tab; there is no queue to wait in.\n- `revoked` \u2014 the credential is not active; ask your user to create a new agent.\n\n`ready` covers hosted identity and the budget only, not your local signer. Check that with `npx -y @haven_ai/connect@<channel> --doctor`, the same tag your prompt named \u2014 a separate command, so the two-changes rule does not bind it.\n\n## If you cannot open a browser\n\nNothing here needs you to. Steps 1-3 are links: hand your user the full `<host>/\u2026` URL and ask them to say when it is done. Step 5 is a link only when your run reported one in `approval.url` \u2014 otherwise it is the tab they already have open, as above. Then poll `haven_get_agent` until it reads `ready`. Do not route around the sign-in wall \u2014 it makes the account theirs, not yours.\n\n## Vocabulary\n\n| Term | What it is |\n|---|---|\n| **setup prompt** | The text the dashboard hands your user to paste to you. Carries the command and its rules. |\n| **connector command** | The `npx -y @haven_ai/connect@\u2026` line you run. One-time token, one use. |\n| **agent credential** | Your API key (`sk_agent_\u2026`), written to `~/.haven`. It identifies you; alone it cannot move money. |\n| **delegate key** | Your signing key, made on this machine and never sent anywhere. |\n| **budget** | The on-chain delegation your user signed. It authorises the payment; Haven constructs and relays it. |\n\nNext: [your agent hit a 402](/402.md) \xB7 [everything agent-readable](/llms.txt)\n";
 
 // src/token.ts
 function sessionExpiry(token) {
@@ -373,9 +397,166 @@ function sessionExpiry(token) {
   }
 }
 
+// src/amount.ts
+function decimalLabel(decimals) {
+  return decimals === 1 ? "1 decimal place" : `${decimals} decimal places`;
+}
+function parseTokenAmount(input, decimals, tokenSymbol) {
+  if (!Number.isInteger(decimals) || decimals < 0 || decimals > 36) {
+    return { ok: false, message: `Unusable token decimals: ${String(decimals)}` };
+  }
+  const trimmed = String(input ?? "").trim();
+  const human = trimmed.startsWith(".") ? `0${trimmed}` : trimmed;
+  const label = tokenSymbol ? ` ${tokenSymbol}` : "";
+  if (human === "") return { ok: false, message: "Enter an amount greater than 0" };
+  if (!/^\d+(?:\.\d+)?$/.test(human)) {
+    return { ok: false, message: `Enter a valid${label} amount \u2014 digits, with an optional decimal point` };
+  }
+  const [whole, fraction = ""] = human.split(".");
+  if (fraction.length > decimals) {
+    return {
+      ok: false,
+      message: `${tokenSymbol ?? "This token"} supports up to ${decimalLabel(decimals)}`
+    };
+  }
+  const atomic = BigInt(`${whole}${fraction.padEnd(decimals, "0")}`);
+  if (atomic === 0n) return { ok: false, message: "Enter an amount greater than 0" };
+  return { ok: true, human, atomic: atomic.toString() };
+}
+function splitConnectorCommand(command) {
+  const argv = [];
+  let current = "";
+  let quoted = false;
+  let started = false;
+  for (let i = 0; i < command.length; i += 1) {
+    const ch = command[i];
+    if (quoted) {
+      if (ch === "'") quoted = false;
+      else current += ch;
+      continue;
+    }
+    if (ch === "'") {
+      quoted = true;
+      started = true;
+      continue;
+    }
+    if (ch === " " || ch === "	") {
+      if (started) argv.push(current);
+      current = "";
+      started = false;
+      continue;
+    }
+    if (ch === "\\") {
+      if (command[i + 1] === "'") {
+        current += "'";
+        started = true;
+        i += 1;
+        continue;
+      }
+      throw new Error("Refusing to run a connector command with a backslash escape");
+    }
+    if (ch === '"' || ch === "`" || ch === "$" || ch === "|" || ch === "&" || ch === ";" || ch === ">" || ch === "<" || ch === "(" || ch === ")" || ch === "\n") {
+      throw new Error(`Refusing to run a connector command containing ${JSON.stringify(ch)}`);
+    }
+    current += ch;
+    started = true;
+  }
+  if (quoted) throw new Error("Refusing to run a connector command with an unterminated quote");
+  if (started) argv.push(current);
+  if (argv.length === 0) throw new Error("The backend returned an empty connector command");
+  return argv;
+}
+var nodeSpawner = (command, args, onStderr) => new Promise((resolve2, reject) => {
+  const child = child_process.spawn(command, args, { shell: false, stdio: ["ignore", "pipe", "pipe"] });
+  let stdout = "";
+  let stderr = "";
+  child.stdout.setEncoding("utf8");
+  child.stderr.setEncoding("utf8");
+  child.stdout.on("data", (chunk) => {
+    stdout += chunk;
+  });
+  child.stderr.on("data", (chunk) => {
+    stderr += chunk;
+    onStderr(chunk);
+  });
+  child.on("error", reject);
+  child.on("close", (code) => resolve2({ stdout, stderr, exitCode: code ?? 1 }));
+});
+function parseOutcome(stdout) {
+  const noise = [];
+  let outcome = null;
+  let depth = 0;
+  let start = -1;
+  let inString = false;
+  let escaped = false;
+  let plain = "";
+  for (let i = 0; i < stdout.length; i += 1) {
+    const ch = stdout[i];
+    if (depth === 0) {
+      if (ch === "{") {
+        depth = 1;
+        start = i;
+        inString = false;
+        escaped = false;
+      } else {
+        plain += ch;
+      }
+      continue;
+    }
+    if (inString) {
+      if (escaped) escaped = false;
+      else if (ch === "\\") escaped = true;
+      else if (ch === '"') inString = false;
+      continue;
+    }
+    if (ch === '"') inString = true;
+    else if (ch === "{") depth += 1;
+    else if (ch === "}") {
+      depth -= 1;
+      if (depth === 0) {
+        const candidate = stdout.slice(start, i + 1);
+        try {
+          outcome = JSON.parse(candidate);
+        } catch {
+          plain += candidate;
+        }
+        start = -1;
+      }
+    }
+  }
+  if (depth > 0 && start >= 0) plain += stdout.slice(start);
+  for (const line of plain.split("\n")) {
+    const text = line.trim();
+    if (text) noise.push(text);
+  }
+  return { outcome, noise: noise.join("\n") };
+}
+function isRefusal(outcome) {
+  return Boolean(outcome?.error);
+}
+function relayLine(outcome) {
+  if (!outcome) return null;
+  if (outcome.error) {
+    const message = outcome.error.message?.trim();
+    const next = outcome.error.next_action ?? outcome.next_action;
+    return message ? `${message}${next ? ` (next: ${next})` : ""}` : `The connector refused${next ? `: ${next}` : "."}`;
+  }
+  if (outcome.approval?.required) {
+    return outcome.approval.url ? `Approve the budget to finish: ${outcome.approval.url}` : "Approve the budget in your Haven tab to finish.";
+  }
+  return null;
+}
+async function runConnector(connectorCommand, spawner, onStderr) {
+  const argv = splitConnectorCommand(connectorCommand);
+  const args = [...argv.slice(1), "--json"];
+  const { stdout, stderr, exitCode } = await spawner(argv[0], args, onStderr);
+  const { outcome, noise } = parseOutcome(stdout);
+  return { outcome, exitCode, stderr, stdoutNoise: noise };
+}
+
 // src/commands.ts
 var DEFAULT_API = "https://havenbackend-production-8a00.up.railway.app";
-var CLI_VERSION = "0.0.0-dev.202609051302.7cc48d5";
+var CLI_VERSION = "0.0.0-dev.202609051933.cc65a9d";
 async function run(argv, deps = {}) {
   const out = deps.out ?? ((l) => process.stdout.write(`${l}
 `));
@@ -388,6 +569,7 @@ async function run(argv, deps = {}) {
     makeApi: deps.makeApi ?? ((baseUrl, token) => createCliApi({ baseUrl, token })),
     promptPassword: deps.promptPassword ?? (() => Promise.reject(new Error("No password input available"))),
     sleep: deps.sleep ?? ((ms) => new Promise((resolve2) => setTimeout(resolve2, ms))),
+    spawner: deps.spawner ?? nodeSpawner,
     out,
     err,
     env: deps.env ?? process.env,
@@ -437,6 +619,8 @@ async function dispatch(args, d) {
       return cmdAgentsList(args, d);
     case "agents show":
       return cmdAgentsShow(args, d);
+    case "agents connect":
+      return cmdAgentsConnect(args, d);
     case "agents pause":
       return cmdAgentLifecycle(args, d, "pause");
     case "agents resume":
@@ -844,6 +1028,126 @@ async function cmdCatalogList(args, d) {
   );
   return EXIT.ok;
 }
+async function resolveWalletAndToken(args, api, symbol) {
+  const { safes } = await api.get("/user/safes");
+  if (safes.length === 0) {
+    throw new HavenCliError("No wallet on this account yet \u2014 finish onboarding first.", EXIT.refused);
+  }
+  const safe = args.flags.safe ? safes.find((s) => s.id === args.flags.safe || s.safe_address === args.flags.safe) : safes.find((s) => s.is_default) ?? safes[0];
+  if (!safe) throw new UsageError(`No wallet matches --safe ${args.flags.safe}`);
+  const { balances } = await api.get(
+    `/balances/${safe.safe_address}?chain_id=${safe.chain_id}`
+  );
+  const wanted = symbol.trim().toUpperCase();
+  const token = balances.find((b) => b.symbol.toUpperCase() === wanted);
+  if (!token) {
+    const known = balances.map((b) => b.symbol).join(", ");
+    throw new UsageError(`Unknown token ${symbol} on this wallet's chain. Available: ${known || "none"}`);
+  }
+  return { safeId: safe.id, token };
+}
+var SETTLED = /* @__PURE__ */ new Set(["active", "expired", "cancelled", "failed"]);
+async function pollSetup(api, setupId, d, wait) {
+  let status = await api.get(`/agent-connection-setups/${setupId}`);
+  if (!wait) return status;
+  const deadline = new Date(status.expires_at).getTime();
+  while (!SETTLED.has(status.status) && Date.now() < deadline) {
+    await d.sleep(5e3);
+    status = await api.get(`/agent-connection-setups/${setupId}`);
+  }
+  return status;
+}
+async function cmdAgentsConnect(args, d) {
+  const { api } = await authed(args, d);
+  if (args.flags.status) {
+    const status = await pollSetup(api, args.flags.status, d, args.flags.wait);
+    emit(
+      d,
+      args.flags.json,
+      status,
+      () => [
+        `setup ${status.setup_id}: ${status.status}`,
+        status.agent_id ? `agent: ${status.agent_id}` : null,
+        SETTLED.has(status.status) ? null : `approve: ${status.approval_url}`
+      ].filter(Boolean).join("\n")
+    );
+    return EXIT.ok;
+  }
+  const name = args.flags.name?.trim();
+  if (!name) throw new UsageError("Usage: haven agents connect --name <name> --budget <amount> --token USDC --period <minutes>");
+  if (!args.flags.budget || !args.flags.token || args.flags.period === void 0) {
+    throw new UsageError("--budget, --token and --period are required (period is whole minutes; 0 means one-time)");
+  }
+  const { safeId, token } = await resolveWalletAndToken(args, api, args.flags.token);
+  const amount = parseTokenAmount(args.flags.budget, token.decimals, token.symbol);
+  if (!amount.ok) throw new UsageError(amount.message);
+  const setup = await api.post("/agent-connection-setups", {
+    name,
+    safe_id: safeId,
+    allowances: [
+      {
+        token_address: token.address ?? "0x0000000000000000000000000000000000000000",
+        token_symbol: token.symbol,
+        // ATOMIC on the way in, human on the way back (#2295). Converted here
+        // exactly once, from the decimals the backend just told us.
+        allowance_amount: amount.atomic,
+        reset_period_min: args.flags.period
+      }
+    ],
+    // How this setup was made, for connect attribution (#2302). The route
+    // already accepts any slug, so nothing backend-side had to change.
+    source: "cli",
+    // #2522: the hand-off marker, set only when an agent is driving this CLI
+    // and says so. Never inferred — a guess here mislabels a human's own run.
+    ...d.env.HAVEN_AGENT_DRIVEN === "1" ? { via: "agent" } : {}
+  });
+  if (!args.flags.run) {
+    emit(
+      d,
+      args.flags.json,
+      setup,
+      () => [
+        "Run this where the agent runs:",
+        "",
+        setup.connector_command,
+        "",
+        `Then approve the budget: ${setup.approval_url}`,
+        `Setup ${setup.setup_id} expires ${setup.expires_at}.`
+      ].join("\n")
+    );
+    return EXIT.ok;
+  }
+  const run2 = await runConnector(setup.connector_command, d.spawner, (chunk) => d.err(chunk.trimEnd()));
+  const relay = relayLine(run2.outcome);
+  const merged = {
+    setup_id: setup.setup_id,
+    approval_url: setup.approval_url,
+    connector_command: setup.connector_command,
+    connector_exit_code: run2.exitCode,
+    outcome: run2.outcome,
+    relay
+  };
+  if (isRefusal(run2.outcome)) {
+    emitConnectResult(d, args.flags.json, merged, relay);
+    return EXIT.refused;
+  }
+  if (!run2.outcome) {
+    throw new HavenCliError(
+      `The connector produced no outcome (exit ${run2.exitCode}).${run2.stdoutNoise ? ` Output: ${run2.stdoutNoise}` : ""}`,
+      run2.exitCode === 0 ? EXIT.failed : EXIT.failed
+    );
+  }
+  emitConnectResult(d, args.flags.json, merged, relay);
+  return EXIT.ok;
+}
+function emitConnectResult(d, json, merged, relay) {
+  emit(
+    d,
+    json,
+    merged,
+    () => [relay, relay ? "" : null, `setup ${merged.setup_id}: ${merged.outcome?.outcome ?? "unknown"}`].filter((line) => line !== null).join("\n")
+  );
+}
 async function cmdContactsList(args, d) {
   const { api } = await authed(args, d);
   const { contacts } = await api.get("/contacts");