@haven_ai/cli 0.0.0-dev.202610231710.79f6802 → 0.0.0-dev.202610231728.63dccc8

package/README.md

@@ -166,7 +166,8 @@ never calls `activate` — that is the whole design.
   route). `--amount` is in
   whole tokens, read from your wallet's balances exactly like
   `agents connect`; `--recipient` pins the budget to one address (omit for an
-  open budget); `--expires` takes unix seconds (default: 90 days). A grant
+  open budget); `--expires` takes unix seconds, at most 365 days from now
+  (`#4351`; default: 90 days). A grant
   adds a budget to an EMPTY (token, recipient) slot only: when the agent
   already has a live budget there, the build is refused (exit 4,
   `error_code: BUDGET_SLOT_OCCUPIED` with `existing_delegation_hash` under

package/dist/cli.cjs

@@ -90,6 +90,9 @@ function parseArgs(argv) {
       } else if (arg === "--expires") {
         const n = Number(value);
         if (!Number.isInteger(n) || n <= 0) throw new Error("--expires must be a unix timestamp in seconds");
+        if (n > Math.floor(Date.now() / 1e3) + 365 * 86400) {
+          throw new Error("--expires must be at most 365 days from now");
+        }
         flags.expires = n;
       } else if (arg === "--format") {
         if (value !== "csv" && value !== "sie") throw new Error('--format must be "csv" or "sie"');
@@ -3152,7 +3155,7 @@ async function checkTextForSecrets(text, deps) {
 
 // src/commands.ts
 var DEFAULT_API = "https://havenbackend-production-8a00.up.railway.app";
-var CLI_VERSION = "0.0.0-dev.202610231710.79f6802";
+var CLI_VERSION = "0.0.0-dev.202610231728.63dccc8";
 var CLI_CLIENT_IDENTITY = `@haven_ai/cli/${CLI_VERSION}`;
 function accountAddressOf(s) {
   return s.account_address ?? "";