@haven_ai/cli 0.0.0-dev.202610301329.99ef8d0 → 0.0.0-dev.202611041126.f6fdb26

package/README.md

@@ -138,7 +138,6 @@ haven agents revoke <id> [--keep-budget] --yes   # retires the agent in Haven (t
 haven agents rotate-key <id>             # new API key, shown once
 haven agents rename <id> <name>
 haven wallets rename <id> <name>
-haven contacts add <name> <address> | contacts remove <id>
 
 # set an agent up without the dashboard modal (#2527)
 haven agents connect --name <name> --budget <amount> --token USDC --period <minutes>
@@ -311,7 +310,9 @@ commands call routes the allow-list leaves out, so they need an ordinary
 session too: `haven wallets rename` (`PUT /user/accounts/:id`) and
 `haven activity export --format sie` (`GET /accounting/export`). Under a
 device-code session the backend answers all three with a 401, so they exit
-**3**, the same as a missing session. The allow-list lives in
+**3**, the same as a missing session. `haven contacts add` and `remove` refuse under
+any session, exit **4**, without calling the backend: saved contacts are written in
+the dashboard. The allow-list lives in
 `packages/backend/src/middleware/owner-cli.ts`; a route that is not on it
 refuses, because #1640 already refuses every purpose-carrying token everywhere
 and this is a single opt-in exception. A census test measures what the

package/dist/cli.cjs

@@ -171,8 +171,6 @@ function helpText() {
     "  agents rotate-key <id>        Issue a new API key (shown once)",
     "  agents rename <id> <name>",
     "  wallets rename <id> <name>",
-    "  contacts add <name> <address>  Save an address under a name",
-    "  contacts remove <id>          Forget one",
     "",
     "Budgets (construct-and-hand-off \u2014 the CLI never signs, #2539):",
     "  budget grant <agentId> --amount <n> --token USDC --period <minutes>",
@@ -3155,7 +3153,7 @@ async function checkTextForSecrets(text, deps) {
 
 // src/commands.ts
 var DEFAULT_API = "https://havenbackend-production-8a00.up.railway.app";
-var CLI_VERSION = "0.0.0-dev.202610301329.99ef8d0";
+var CLI_VERSION = "0.0.0-dev.202611041126.f6fdb26";
 var CLI_CLIENT_IDENTITY = `@haven_ai/cli/${CLI_VERSION}`;
 function accountAddressOf(s) {
   return s.account_address ?? "";
@@ -3253,13 +3251,10 @@ async function dispatch(args, d) {
       return cmdCatalogList(args, d);
     case "contacts list":
       return cmdContactsList(args, d);
-    case "contacts add":
-      return cmdContactsAdd(args, d);
-    case "contacts remove":
-      return cmdContactsRemove(args, d);
     case "feedback submit":
       return cmdFeedbackSubmit(args, d);
     default:
+      if (key === "contacts add" || key === "contacts remove") refuseContactWrite();
       throw new UsageError(`Unknown command: ${key}.`, "Run `haven --help` for the command list.");
   }
 }
@@ -4109,22 +4104,11 @@ async function cmdContactsList(args, d) {
   );
   return EXIT.ok;
 }
-async function cmdContactsAdd(args, d) {
-  const [address, ...nameParts] = [...args.positionals].reverse();
-  const name = nameParts.reverse().join(" ").trim();
-  if (!name || !address) throw new UsageError("Usage: haven contacts add <name> <address>");
-  const { api } = await authed(args, d);
-  const contact = await api.post("/contacts", { name, address });
-  emit(d, args.flags.json, contact, () => `Added contact "${contact.name}" (${truncateAddress(contact.address)}).`);
-  return EXIT.ok;
-}
-async function cmdContactsRemove(args, d) {
-  const id = args.positionals[0];
-  if (!id) throw new UsageError("Usage: haven contacts remove <id>");
-  const { api } = await authed(args, d);
-  await api.del(`/contacts/${id}`);
-  emit(d, args.flags.json, { ok: true, contact_id: id, removed: true }, () => `Contact ${id} removed.`);
-  return EXIT.ok;
+function refuseContactWrite() {
+  throw new HavenCliError(
+    "Contacts can only be added or removed in the Haven dashboard. `haven contacts list` still works.",
+    EXIT.refused
+  );
 }
 async function cmdFeedbackSubmit(args, d) {
   const text = args.positionals.join(" ").trim();