@haven_ai/cli 0.0.0-dev.202610061536.ad3de49 → 0.0.0-dev.202610071154.39eddce

package/README.md

@@ -126,7 +126,9 @@ haven feedback submit "<text>"           # several unquoted words are joined int
 
 # manage (backend-only — no on-chain signing)
 haven agents pause <id> | resume <id>
-haven agents revoke <id> --yes           # terminal; needs explicit --yes
+haven agents revoke <id> [--keep-budget] --yes   # terminal; needs explicit --yes; refuses
+                                                 # while a budget is still live on-chain
+                                                 # unless --keep-budget
 haven agents rotate-key <id>             # new API key, shown once
 haven agents rename <id> <name>
 haven wallets rename <id> <name>

package/dist/cli.cjs

@@ -41,7 +41,8 @@ function parseArgs(argv) {
     noWait: false,
     run: false,
     wait: false,
-    hashes: false
+    hashes: false,
+    keepBudget: false
   };
   for (let i = 0; i < argv.length; i += 1) {
     const arg = argv[i];
@@ -49,6 +50,7 @@ function parseArgs(argv) {
     else if (arg === "--help" || arg === "-h") flags.help = true;
     else if (arg === "--version" || arg === "-v") flags.version = true;
     else if (arg === "--yes" || arg === "-y") flags.yes = true;
+    else if (arg === "--keep-budget") flags.keepBudget = true;
     else if (arg === "--no-wait") flags.noWait = true;
     else if (arg === "--run") flags.run = true;
     else if (arg === "--wait") flags.wait = true;
@@ -159,7 +161,8 @@ function helpText() {
     "Manage (backend-only \u2014 no on-chain signing):",
     "  agents pause <id>             Stop the agent spending; keeps its budget",
     "  agents resume <id>            Let it spend again",
-    "  agents revoke <id> --yes      Permanently revoke an agent",
+    "  agents revoke <id> --yes      Permanently revoke an agent. Refuses while a",
+    "                          budget is still live on-chain unless --keep-budget",
     "  agents rotate-key <id>        Issue a new API key (shown once)",
     "  agents rename <id> <name>",
     "  wallets rename <id> <name>",
@@ -3147,7 +3150,7 @@ async function checkTextForSecrets(text, deps) {
 
 // src/commands.ts
 var DEFAULT_API = "https://havenbackend-production-8a00.up.railway.app";
-var CLI_VERSION = "0.0.0-dev.202610061536.ad3de49";
+var CLI_VERSION = "0.0.0-dev.202610071154.39eddce";
 var CLI_CLIENT_IDENTITY = `@haven_ai/cli/${CLI_VERSION}`;
 function accountAddressOf(s) {
   return s.account_address ?? "";
@@ -3701,12 +3704,6 @@ async function cmdBudgetRevoke(args, d) {
   if (row.status === "revoked") {
     throw new HavenCliError(`Delegation ${hash} is already revoked.`, EXIT.refused);
   }
-  if (row.status === "replaced") {
-    throw new HavenCliError(
-      `Delegation ${hash} was already replaced by a newer grant \u2014 nothing to revoke.`,
-      EXIT.refused
-    );
-  }
   const prepared = await api.post(`/agents/${id}/delegations/${hash}/revoke`, {});
   const revokeUrl = prepared.revocation_url;
   if (!revokeUrl) {
@@ -3762,7 +3759,7 @@ async function cmdAgentLifecycle(args, d, action) {
 }
 async function cmdAgentRevoke(args, d) {
   const id = args.positionals[0];
-  if (!id) throw new UsageError("Usage: haven agents revoke <id> --yes");
+  if (!id) throw new UsageError("Usage: haven agents revoke <id> [--keep-budget] --yes");
   if (!args.flags.yes) {
     throw new UsageError(
       `This permanently revokes agent ${id}.`,
@@ -3770,12 +3767,45 @@ async function cmdAgentRevoke(args, d) {
     );
   }
   const { api } = await authed(args, d);
+  let live = [];
+  try {
+    const agent = await api.get(`/agents/${id}`);
+    if ((agent.live_delegation_count ?? 0) > 0) {
+      const { delegations } = await api.get(`/agents/${id}/delegations`);
+      live = delegations.filter((r) => r.status === "pending" || r.status === "active" || r.status === "replaced");
+    }
+  } catch (err) {
+    d.o.note(`Couldn't check budgets for agent ${id}, so the revocation was not attempted.`);
+    throw err;
+  }
+  if (live.length > 0 && !args.flags.keepBudget) {
+    throw new HavenCliError(
+      `Agent ${id} still has a live on-chain budget. Revoking now would leave it redeemable by the delegate key.`,
+      EXIT.refused,
+      [
+        ...live.map((r) => `haven budget revoke ${id} ${r.delegation_hash}  # ${r.status}`),
+        "Remove agent\u2026 in the dashboard ends every live budget with one signature, before revoking.",
+        "To revoke the agent anyway and leave the budget live on-chain, re-run with --keep-budget."
+      ].join("\n"),
+      // The machine branch: a script skips the prose and reads the rows.
+      { live_delegations: live.map(({ delegation_hash, status }) => ({ delegation_hash, status })) }
+    );
+  }
   await api.post(`/agents/${id}/revoke`);
   emit(
     d,
     args.flags.json,
-    { ok: true, agent_id: id, status: "revoked" },
-    () => `Agent ${id} revoked. To also remove its on-chain allowance, use the dashboard.`
+    live.length > 0 ? {
+      ok: true,
+      agent_id: id,
+      status: "revoked",
+      live_delegations: live.map(({ delegation_hash, status }) => ({ delegation_hash, status }))
+    } : { ok: true, agent_id: id, status: "revoked" },
+    () => live.length > 0 ? [
+      `Agent ${id} revoked.`,
+      `Its budget is still live on-chain: the delegate key can keep spending until each delegation is revoked.`,
+      ...live.map((r) => `haven budget revoke ${id} ${r.delegation_hash}  # ${r.status}`)
+    ].join("\n") : `Agent ${id} revoked. To also remove its on-chain allowance, use the dashboard.`
   );
   return EXIT.ok;
 }