@stripe/link-cli 0.8.1 → 0.8.3

package/README.md

@@ -105,7 +105,7 @@ Returns the shipping addresses saved to your Link account. The response preserve
 
 ### Create a spend request
 
-Create a spend request with a payment method, merchant details, line items, and amounts:
+Create a spend request with merchant details, line items, and amounts. If `--payment-method-id` is omitted, your default payment method will be used, or the first eligible one if no default is set:
 
 ```bash
 link-cli spend-request create \
@@ -214,7 +214,7 @@ All commands accept `--auth <path>` to store auth credentials in a specific file
 
 A spend request moves through: **create** → **request approval** → **approved** (with credentials).
 
-**Required fields for create:** `payment_method_id`, `merchant_name`, `merchant_url`, `context`, `amount`
+**Required fields for create:** `merchant_name`, `merchant_url`, `context`, `amount`. `payment_method_id` is optional — if omitted, your default payment method will be used, or the first eligible one if no default is set.
 
 **Constraints:** `context` must be at least 100 characters; `amount` must not exceed 500000 (cents); `currency` must be a 3-letter ISO code. The user has 10 minutes from when approval is requested to approve. Approved credentials (card or SPT) are valid for 12 hours from spend request creation.
 **Test mode:** Pass `--test` to create testmode credentials (uses test card `4242424242424242`), useful for development and integration testing without real payment methods.

package/dist/cli.js

@@ -8835,19 +8835,19 @@ var require_range = __commonJS({
     var replaceCaret = (comp, options) => {
       debug("caret", comp, options);
       const r = options.loose ? re[t.CARETLOOSE] : re[t.CARET];
-      const z10 = options.includePrerelease ? "-0" : "";
+      const z11 = options.includePrerelease ? "-0" : "";
       return comp.replace(r, (_, M, m, p, pr) => {
         debug("caret", comp, _, M, m, p, pr);
         let ret;
         if (isX(M)) {
           ret = "";
         } else if (isX(m)) {
-          ret = `>=${M}.0.0${z10} <${+M + 1}.0.0-0`;
+          ret = `>=${M}.0.0${z11} <${+M + 1}.0.0-0`;
         } else if (isX(p)) {
           if (M === "0") {
-            ret = `>=${M}.${m}.0${z10} <${M}.${+m + 1}.0-0`;
+            ret = `>=${M}.${m}.0${z11} <${M}.${+m + 1}.0-0`;
           } else {
-            ret = `>=${M}.${m}.0${z10} <${+M + 1}.0.0-0`;
+            ret = `>=${M}.${m}.0${z11} <${+M + 1}.0.0-0`;
           }
         } else if (pr) {
           debug("replaceCaret pr", pr);
@@ -8864,9 +8864,9 @@ var require_range = __commonJS({
           debug("no pr");
           if (M === "0") {
             if (m === "0") {
-              ret = `>=${M}.${m}.${p}${z10} <${M}.${m}.${+p + 1}-0`;
+              ret = `>=${M}.${m}.${p}${z11} <${M}.${m}.${+p + 1}-0`;
             } else {
-              ret = `>=${M}.${m}.${p}${z10} <${M}.${+m + 1}.0-0`;
+              ret = `>=${M}.${m}.${p}${z11} <${M}.${+m + 1}.0-0`;
             }
           } else {
             ret = `>=${M}.${m}.${p} <${+M + 1}.0.0-0`;
@@ -11524,6 +11524,216 @@ var SpendRequestResource = class {
     return normalizeSpendRequest(data);
   }
 };
+function isRecord(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function requireString(value, field) {
+  if (typeof value !== "string") {
+    throw new TypeError(`Expected ${field} to be a string`);
+  }
+  return value;
+}
+function requireNullableString(value, field) {
+  if (value === null) {
+    return null;
+  }
+  if (typeof value !== "string") {
+    throw new TypeError(`Expected ${field} to be a string or null`);
+  }
+  return value;
+}
+function requireNumber(value, field) {
+  if (typeof value !== "number" || !Number.isFinite(value)) {
+    throw new TypeError(`Expected ${field} to be a finite number`);
+  }
+  return value;
+}
+function requireBoolean(value, field) {
+  if (typeof value !== "boolean") {
+    throw new TypeError(`Expected ${field} to be a boolean`);
+  }
+  return value;
+}
+function requireTransactionOrigin(value, field) {
+  if (value === "link" || value === "external_connection") {
+    return value;
+  }
+  throw new TypeError(`Expected ${field} to be a transaction origin`);
+}
+function normalizeTransactions(value) {
+  if (!Array.isArray(value)) {
+    throw new TypeError("Expected transactions to be an array");
+  }
+  return value.map((item, index) => {
+    if (!isRecord(item)) {
+      throw new TypeError(`Expected transactions[${index}] to be an object`);
+    }
+    return {
+      id: requireString(item.id, `transactions[${index}].id`),
+      source_id: requireNullableString(
+        item.source_id,
+        `transactions[${index}].source_id`
+      ),
+      amount: requireNumber(item.amount, `transactions[${index}].amount`),
+      currency: requireString(item.currency, `transactions[${index}].currency`),
+      created_date: requireString(
+        item.created_date,
+        `transactions[${index}].created_date`
+      ),
+      description: requireString(
+        item.description,
+        `transactions[${index}].description`
+      ),
+      origin: requireTransactionOrigin(
+        item.origin,
+        `transactions[${index}].origin`
+      ),
+      category: requireNullableString(
+        item.category,
+        `transactions[${index}].category`
+      ),
+      status: requireString(item.status, `transactions[${index}].status`)
+    };
+  });
+}
+function normalizeTransactionsPage(value) {
+  if (Array.isArray(value)) {
+    return { data: normalizeTransactions(value) };
+  }
+  if (!isRecord(value)) {
+    throw new TypeError("Expected response body to be an object");
+  }
+  const { data, has_more, ...rest } = value;
+  const normalized = normalizeTransactions(data);
+  return {
+    ...rest,
+    data: normalized,
+    ...has_more !== void 0 ? { has_more: requireBoolean(has_more, "has_more") } : {}
+  };
+}
+var TransactionsResource = class {
+  verbose;
+  getAccessToken;
+  fetchImpl;
+  endpoint;
+  logger;
+  constructor(options = {}) {
+    const config = resolveLinkSdkConfig(options);
+    this.verbose = config.verbose;
+    this.getAccessToken = config.getAccessToken;
+    this.fetchImpl = requireFetchImplementation(config);
+    this.endpoint = `${config.apiBaseUrl}/transactions`;
+    this.logger = config.logger;
+  }
+  async rawFetch(opts) {
+    if (this.verbose) {
+      const redactedHeaders = { ...opts.headers };
+      if (redactedHeaders.Authorization)
+        redactedHeaders.Authorization = "Bearer <redacted>";
+      this.logger.debug(`> ${opts.method} ${opts.url}`);
+      this.logger.debug(`  Headers: ${JSON.stringify(redactedHeaders)}`);
+    }
+    let response;
+    try {
+      response = await this.fetchImpl(opts.url, {
+        method: opts.method,
+        headers: opts.headers
+      });
+    } catch (error) {
+      throw new LinkTransportError(
+        `Request failed: ${opts.method} ${opts.url}`,
+        { cause: error }
+      );
+    }
+    const rawBody = await response.text();
+    let data = null;
+    try {
+      data = JSON.parse(rawBody);
+    } catch {
+    }
+    if (this.verbose) {
+      this.logger.debug(`< ${response.status} ${response.statusText}`);
+      response.headers.forEach((value, key) => {
+        this.logger.debug(`  ${key}: ${value}`);
+      });
+      this.logger.debug(rawBody);
+    }
+    return { status: response.status, data, rawBody };
+  }
+  async apiFetch(opts) {
+    const token = await this.getAccessToken();
+    const authedOpts = {
+      ...opts,
+      headers: {
+        ...opts.headers,
+        Authorization: `Bearer ${token}`
+      }
+    };
+    const res = await this.rawFetch(authedOpts);
+    if (res.status === 401) {
+      const refreshedToken = await this.getAccessToken({ forceRefresh: true });
+      authedOpts.headers.Authorization = `Bearer ${refreshedToken}`;
+      return this.rawFetch(authedOpts);
+    }
+    return res;
+  }
+  buildUrl(params) {
+    const url = new URL(this.endpoint);
+    if (params.limit !== void 0) {
+      url.searchParams.set("limit", String(params.limit));
+    }
+    if (params.starting_after !== void 0) {
+      url.searchParams.set("starting_after", params.starting_after);
+    }
+    if (params.ending_before !== void 0) {
+      url.searchParams.set("ending_before", params.ending_before);
+    }
+    if (params.start_date !== void 0) {
+      url.searchParams.set("date_start", params.start_date);
+    }
+    if (params.end_date !== void 0) {
+      url.searchParams.set("date_end", params.end_date);
+    }
+    if (params.category !== void 0) {
+      url.searchParams.set("category", params.category);
+    }
+    if (params.origin !== void 0) {
+      url.searchParams.set("origin", params.origin);
+    }
+    if (params.sources !== void 0) {
+      for (const source of params.sources) {
+        url.searchParams.append("sources[]", source);
+      }
+    }
+    return url.toString();
+  }
+  list(params = {}) {
+    return this.listTransactions(params);
+  }
+  async listTransactions(params = {}) {
+    const { status, data, rawBody } = await this.apiFetch({
+      method: "GET",
+      url: this.buildUrl(params)
+    });
+    if (status < 200 || status >= 300) {
+      const body = data;
+      const msg = body?.error ?? body?.message ?? (rawBody || "unknown error");
+      throw new LinkApiError(
+        `Failed to list transactions (${status}): ${msg}`,
+        { status, rawBody, details: data }
+      );
+    }
+    try {
+      return normalizeTransactionsPage(data);
+    } catch (error) {
+      const reason = error instanceof Error ? `: ${error.message}` : "";
+      throw new LinkApiError(
+        `Failed to list transactions (200): invalid response shape${reason}`,
+        { status, rawBody, details: data, cause: error }
+      );
+    }
+  }
+};
 var UserInfoResource = class {
   verbose;
   getAccessToken;
@@ -11843,7 +12053,7 @@ var ReportResource = class {
 };
 
 // src/cli.tsx
-import { Cli as Cli11 } from "incur";
+import { Cli as Cli12 } from "incur";
 
 // src/commands/auth/index.tsx
 import { Cli } from "incur";
@@ -14791,7 +15001,7 @@ var CancelSpendRequest = ({
 };
 
 // src/commands/spend-request/create.tsx
-import { Box as Box16, Text as Text18 } from "ink";
+import { Box as Box16, Text as Text18, useApp as useApp4 } from "ink";
 import Spinner8 from "ink-spinner";
 import { useCallback as useCallback6, useEffect as useEffect9, useState as useState9 } from "react";
 
@@ -14906,9 +15116,18 @@ var CreateSpendRequest = ({
   const [status, setStatus] = useState9("creating");
   const [request, setRequest] = useState9(null);
   const [error, setError] = useState9("");
+  const [verificationUrl, setVerificationUrl] = useState9("");
   const [outputFilePath, setOutputFilePath] = useState9(null);
   const [fileError, setFileError] = useState9("");
   const approvalUrl = request?.approval_url ?? "";
+  const { exit } = useApp4();
+  const completeAndExit = useCallback6(
+    (result) => {
+      onComplete(result);
+      exit();
+    },
+    [onComplete, exit]
+  );
   const onSuccess = useCallback6(
     (result) => setRequest(result),
     []
@@ -14920,7 +15139,7 @@ var CreateSpendRequest = ({
     approvalUrl,
     repository,
     requestId: request?.id ?? null,
-    onComplete,
+    onComplete: completeAndExit,
     onSuccess,
     onError
   });
@@ -14933,16 +15152,20 @@ var CreateSpendRequest = ({
           setStatus("waiting");
         } else {
           setStatus("success");
-          setTimeout(() => onComplete(result), DISPLAY_DELAY_MS);
+          setTimeout(() => completeAndExit(result), DISPLAY_DELAY_MS);
         }
       } catch (err) {
         setError(err.message);
+        if (err instanceof LinkApiError) {
+          const url = err.details?.error?.verification_url;
+          if (url) setVerificationUrl(url);
+        }
         setStatus("error");
-        setTimeout(() => onComplete(null), DISPLAY_DELAY_MS);
+        setTimeout(() => completeAndExit(null), DISPLAY_DELAY_MS);
       }
     };
     create();
-  }, [repository, params, requestApproval, onComplete]);
+  }, [repository, params, requestApproval, completeAndExit]);
   useEffect9(() => {
     if (status !== "success" || !outputFile || !request?.card) return;
     const fileData = {
@@ -14964,7 +15187,11 @@ var CreateSpendRequest = ({
   if (status === "error") {
     return /* @__PURE__ */ jsxs16(Box16, { flexDirection: "column", children: [
       /* @__PURE__ */ jsx23(Text18, { color: "red", children: "\u2717 Failed to create spend request" }),
-      /* @__PURE__ */ jsx23(Text18, { color: "red", children: error })
+      /* @__PURE__ */ jsx23(Text18, { color: "red", children: error }),
+      verificationUrl && /* @__PURE__ */ jsxs16(Text18, { color: "red", children: [
+        "Complete additional verification at: ",
+        verificationUrl
+      ] })
     ] });
   }
   if (status === "success") {
@@ -15061,7 +15288,7 @@ var CreateSpendRequest = ({
 };
 
 // src/commands/spend-request/list.tsx
-import { Box as Box17, Text as Text19, useApp as useApp4 } from "ink";
+import { Box as Box17, Text as Text19, useApp as useApp5 } from "ink";
 import Spinner9 from "ink-spinner";
 import { useCallback as useCallback7 } from "react";
 import { jsx as jsx24, jsxs as jsxs17 } from "react/jsx-runtime";
@@ -15070,7 +15297,7 @@ var SpendRequestList = ({
   includeHistory = false,
   onComplete
 }) => {
-  const { exit } = useApp4();
+  const { exit } = useApp5();
   const action = useCallback7(
     () => repository.listSpendRequests({ includeHistory }),
     [repository, includeHistory]
@@ -15119,7 +15346,7 @@ var SpendRequestList = ({
 };
 
 // src/commands/spend-request/request-approval.tsx
-import { Box as Box18, Text as Text20 } from "ink";
+import { Box as Box18, Text as Text20, useApp as useApp6 } from "ink";
 import Spinner10 from "ink-spinner";
 import { useCallback as useCallback8, useEffect as useEffect10, useState as useState10 } from "react";
 import { jsx as jsx25, jsxs as jsxs18 } from "react/jsx-runtime";
@@ -15132,6 +15359,15 @@ var RequestApproval = ({
   const [approvalUrl, setApprovalUrl] = useState10("");
   const [result, setResult] = useState10(null);
   const [error, setError] = useState10("");
+  const [verificationUrl, setVerificationUrl] = useState10("");
+  const { exit } = useApp6();
+  const completeAndExit = useCallback8(
+    (result2) => {
+      onComplete(result2);
+      exit();
+    },
+    [onComplete, exit]
+  );
   const onSuccess = useCallback8((r) => setResult(r), []);
   const onError = useCallback8((msg) => setError(msg), []);
   useApprovalPolling({
@@ -15140,7 +15376,7 @@ var RequestApproval = ({
     approvalUrl,
     repository,
     requestId: id,
-    onComplete,
+    onComplete: completeAndExit,
     onSuccess,
     onError
   });
@@ -15152,11 +15388,19 @@ var RequestApproval = ({
         setStatus("waiting");
       } catch (err) {
         setError(err.message);
+        if (err instanceof LinkApiError) {
+          const url = err.details?.error?.verification_url;
+          if (url) setVerificationUrl(url);
+        }
         setStatus("error");
+        setTimeout(() => {
+          onComplete(null);
+          exit();
+        }, DISPLAY_DELAY_MS);
       }
     };
     request();
-  }, [repository, id]);
+  }, [repository, id, exit, onComplete]);
   if (status === "requesting") {
     return /* @__PURE__ */ jsx25(Box18, { children: /* @__PURE__ */ jsxs18(Text20, { color: "cyan", children: [
       /* @__PURE__ */ jsx25(Spinner10, { type: "dots" }),
@@ -15166,7 +15410,11 @@ var RequestApproval = ({
   if (status === "error") {
     return /* @__PURE__ */ jsxs18(Box18, { flexDirection: "column", children: [
       /* @__PURE__ */ jsx25(Text20, { color: "red", children: "\u2717 Failed to request approval" }),
-      /* @__PURE__ */ jsx25(Text20, { color: "red", children: error })
+      /* @__PURE__ */ jsx25(Text20, { color: "red", children: error }),
+      verificationUrl && /* @__PURE__ */ jsxs18(Text20, { color: "red", children: [
+        "Complete additional verification at: ",
+        verificationUrl
+      ] })
     ] });
   }
   if (status === "success") {
@@ -15631,7 +15879,7 @@ var RetrieveSpendRequest = ({
 // src/commands/spend-request/schema.ts
 import { z as z8 } from "incur";
 var createOptions = z8.object({
-  paymentMethodId: z8.string().describe("Payment method ID"),
+  paymentMethodId: z8.string().optional().describe("Payment method ID"),
   credentialType: z8.enum(["shared_payment_token", "card"]).default("card").describe(
     '"card" for checkout forms/Stripe Elements; "shared_payment_token" for HTTP 402/machine payment flows'
   ),
@@ -15875,7 +16123,7 @@ function createSpendRequestCli(repository, authStorage2, envAccessToken2) {
       const outputFile = opts.outputFile;
       const forceOverwrite = opts.force;
       if (!c.agent && !c.formatExplicit) {
-        let capturedResult = null;
+        let capturedResult = void 0;
         return renderInteractive(
           /* @__PURE__ */ jsx28(
             CreateSpendRequest,
@@ -15891,13 +16139,28 @@ function createSpendRequestCli(repository, authStorage2, envAccessToken2) {
             }
           ),
           () => {
-            if (!capturedResult)
+            if (capturedResult === void 0)
               throw new Error("Component exited without producing a result");
+            if (capturedResult === null) process.exit(1);
             return capturedResult;
           }
         );
       }
-      const created = await repository.createSpendRequest(createParams);
+      let created;
+      try {
+        created = await repository.createSpendRequest(createParams);
+      } catch (err) {
+        if (err instanceof LinkApiError) {
+          const apiErr = err.details;
+          if (apiErr?.error?.verification_url) {
+            return c.error({
+              code: err.code,
+              message: `${err.message} Verification URL: ${apiErr.error.verification_url}`
+            });
+          }
+        }
+        throw err;
+      }
       if (!requestApproval) {
         try {
           yield await applyOutputFile(created, outputFile, forceOverwrite);
@@ -15982,7 +16245,7 @@ function createSpendRequestCli(repository, authStorage2, envAccessToken2) {
       requireAuthGuard(c, authStorage2, envAccessToken2);
       const id = c.args.id;
       if (!c.agent && !c.formatExplicit) {
-        let capturedResult = null;
+        let capturedResult = void 0;
         return renderInteractive(
           /* @__PURE__ */ jsx28(
             RequestApproval,
@@ -15995,13 +16258,28 @@ function createSpendRequestCli(repository, authStorage2, envAccessToken2) {
             }
           ),
           () => {
-            if (!capturedResult)
+            if (capturedResult === void 0)
               throw new Error("Component exited without producing a result");
+            if (capturedResult === null) process.exit(1);
             return capturedResult;
           }
         );
       }
-      const approval = await repository.requestApproval(id);
+      let approval;
+      try {
+        approval = await repository.requestApproval(id);
+      } catch (err) {
+        if (err instanceof LinkApiError) {
+          const apiErr = err.details;
+          if (apiErr?.error?.verification_url) {
+            return c.error({
+              code: err.code,
+              message: `${err.message} Verification URL: ${apiErr.error.verification_url}`
+            });
+          }
+        }
+        throw err;
+      }
       yield {
         ...approval,
         instruction: `Present the approval_url to the user and ask them to approve in the Link app. Then call \`spend-request retrieve ${id} --interval 2 --max-attempts 300\` to poll until approved. Do not wait for the user to reply \u2014 start polling immediately.`,
@@ -16138,55 +16416,221 @@ function createSpendRequestCli(repository, authStorage2, envAccessToken2) {
   return cli2;
 }
 
-// src/commands/user-info/index.tsx
+// src/commands/transactions/index.tsx
 import { Cli as Cli10 } from "incur";
 
-// src/commands/user-info/retrieve.tsx
+// src/commands/transactions/list.tsx
 import { Box as Box21, Text as Text23 } from "ink";
 import Spinner13 from "ink-spinner";
 import { useCallback as useCallback10 } from "react";
 import { jsx as jsx29, jsxs as jsxs21 } from "react/jsx-runtime";
-var UserInfoRetrieve = ({
+var COLUMN_GAP = "  ";
+var DATE_WIDTH = 10;
+var AMOUNT_WIDTH = 13;
+var STATUS_WIDTH = 10;
+var CATEGORY_WIDTH = 16;
+var MIN_DESCRIPTION_WIDTH = 16;
+var HORIZONTAL_PADDING = 4;
+function formatAmount(amount, currency) {
+  const currencyCode = currency.toUpperCase();
+  try {
+    const formatter = new Intl.NumberFormat("en-US", {
+      style: "currency",
+      currency: currencyCode
+    });
+    const fractionDigits = formatter.resolvedOptions().maximumFractionDigits ?? 2;
+    return formatter.format(amount / 10 ** fractionDigits);
+  } catch {
+    return `${amount} ${currency}`;
+  }
+}
+function truncateCell(value, width) {
+  if (value.length <= width) {
+    return value;
+  }
+  if (width <= 3) {
+    return value.slice(0, width);
+  }
+  return `${value.slice(0, width - 3)}...`;
+}
+function formatCell(value, width, align = "left") {
+  const truncated = truncateCell(value, width);
+  return align === "right" ? truncated.padStart(width) : truncated.padEnd(width);
+}
+var TransactionsList = ({
   resource,
+  params,
   onComplete
 }) => {
-  const action = useCallback10(() => resource.retrieve(), [resource]);
-  const { status, data: userInfo, error } = useAsyncAction(action, onComplete);
+  const action = useCallback10(
+    () => resource.listTransactions(params),
+    [resource, params]
+  );
+  const { status, data: page, error } = useAsyncAction(action, onComplete);
+  const transactions = page?.data ?? [];
+  const nextCursor = page?.has_more && transactions.length > 0 ? transactions[transactions.length - 1].id : null;
+  const terminalWidth = process.stdout.columns ?? 100;
+  const descriptionWidth = Math.max(
+    MIN_DESCRIPTION_WIDTH,
+    terminalWidth - HORIZONTAL_PADDING - DATE_WIDTH - AMOUNT_WIDTH - STATUS_WIDTH - CATEGORY_WIDTH - COLUMN_GAP.length * 4
+  );
+  const headerRow = [
+    formatCell("Date", DATE_WIDTH),
+    formatCell("Amount", AMOUNT_WIDTH, "right"),
+    formatCell("Status", STATUS_WIDTH),
+    formatCell("Category", CATEGORY_WIDTH),
+    formatCell("Description", descriptionWidth)
+  ].join(COLUMN_GAP);
+  const separatorRow = "-".repeat(headerRow.length);
+  const rows = transactions.map(
+    (txn) => [
+      formatCell(txn.created_date, DATE_WIDTH),
+      formatCell(formatAmount(txn.amount, txn.currency), AMOUNT_WIDTH, "right"),
+      formatCell(txn.status, STATUS_WIDTH),
+      formatCell(txn.category ?? "", CATEGORY_WIDTH),
+      formatCell(txn.description, descriptionWidth)
+    ].join(COLUMN_GAP)
+  );
   if (status === "loading") {
     return /* @__PURE__ */ jsx29(Box21, { children: /* @__PURE__ */ jsxs21(Text23, { color: "cyan", children: [
       /* @__PURE__ */ jsx29(Spinner13, { type: "dots" }),
-      " Loading user info..."
+      " Loading transactions..."
     ] }) });
   }
   if (status === "error") {
     return /* @__PURE__ */ jsxs21(Box21, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsx29(Text23, { color: "red", children: "\u2717 Failed to load user info" }),
+      /* @__PURE__ */ jsx29(Text23, { color: "red", children: "Failed to load transactions" }),
       /* @__PURE__ */ jsx29(Text23, { color: "red", children: error })
     ] });
   }
+  if (transactions.length === 0) {
+    return /* @__PURE__ */ jsx29(Box21, { children: /* @__PURE__ */ jsx29(Text23, { dimColor: true, children: "No transactions found" }) });
+  }
   return /* @__PURE__ */ jsxs21(Box21, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsx29(Text23, { bold: true, children: "User Info" }),
+    /* @__PURE__ */ jsx29(Text23, { bold: true, children: "Transactions" }),
     /* @__PURE__ */ jsxs21(Box21, { flexDirection: "column", marginTop: 1, paddingX: 2, children: [
-      /* @__PURE__ */ jsxs21(Text23, { children: [
-        /* @__PURE__ */ jsx29(Text23, { dimColor: true, children: "Email: " }),
-        userInfo?.email ?? /* @__PURE__ */ jsx29(Text23, { dimColor: true, children: "Not set" })
+      /* @__PURE__ */ jsx29(Text23, { bold: true, children: headerRow }),
+      /* @__PURE__ */ jsx29(Text23, { dimColor: true, children: separatorRow }),
+      rows.map((row, index) => /* @__PURE__ */ jsx29(Text23, { children: row }, transactions[index].id))
+    ] }),
+    page?.has_more !== void 0 ? /* @__PURE__ */ jsxs21(Box21, { flexDirection: "column", marginTop: 1, children: [
+      /* @__PURE__ */ jsxs21(Text23, { dimColor: true, children: [
+        "has_more: ",
+        String(page.has_more)
+      ] }),
+      nextCursor ? /* @__PURE__ */ jsx29(Text23, { dimColor: true, children: `next page: --starting-after ${nextCursor}` }) : null
+    ] }) : null
+  ] });
+};
+
+// src/commands/transactions/schema.ts
+import { z as z10 } from "incur";
+var ISO_DATE_REGEX = /^\d{4}-\d{2}-\d{2}$/;
+var listOptions2 = z10.object({
+  limit: z10.coerce.number().int().positive().max(100).optional().describe("Maximum number of transactions to return (1-100)."),
+  startingAfter: z10.string().optional().describe("Cursor: return transactions after this transaction ID."),
+  endingBefore: z10.string().optional().describe("Cursor: return transactions before this transaction ID."),
+  startDate: z10.string().regex(ISO_DATE_REGEX, "Date must be in YYYY-MM-DD format.").optional().describe("Only include transactions on or after this YYYY-MM-DD date."),
+  endDate: z10.string().regex(ISO_DATE_REGEX, "Date must be in YYYY-MM-DD format.").optional().describe("Only include transactions on or before this YYYY-MM-DD date."),
+  category: z10.string().optional().describe("Filter by transaction category."),
+  origin: z10.enum(["link", "external_connection"]).optional().describe("Filter by transaction origin: link or external_connection."),
+  source: z10.array(z10.string()).default([]).describe("Filter by source ID. Repeat to include multiple sources.")
+});
+
+// src/commands/transactions/index.tsx
+import { jsx as jsx30 } from "react/jsx-runtime";
+function createTransactionsCli(createResource, authStorage2, envAccessToken2) {
+  const cli2 = Cli10.create("transactions", {
+    description: "List transactions from Link and external accounts"
+  });
+  cli2.command("list", {
+    description: "List transactions from Link and external accounts, including non-Link activity",
+    options: listOptions2,
+    outputPolicy: "agent-only",
+    middleware: [requireAuth(authStorage2, envAccessToken2)],
+    async run(c) {
+      const opts = c.options;
+      const resource = createResource();
+      const params = {};
+      if (opts.limit !== void 0) params.limit = opts.limit;
+      if (opts.startingAfter !== void 0)
+        params.starting_after = opts.startingAfter;
+      if (opts.endingBefore !== void 0)
+        params.ending_before = opts.endingBefore;
+      if (opts.startDate !== void 0) params.start_date = opts.startDate;
+      if (opts.endDate !== void 0) params.end_date = opts.endDate;
+      if (opts.category !== void 0) params.category = opts.category;
+      if (opts.origin !== void 0) params.origin = opts.origin;
+      if (opts.source.length > 0) params.sources = opts.source;
+      if (!c.agent && !c.formatExplicit) {
+        return renderInteractive(
+          /* @__PURE__ */ jsx30(
+            TransactionsList,
+            {
+              resource,
+              params,
+              onComplete: () => {
+              }
+            }
+          ),
+          () => resource.listTransactions(params)
+        );
+      }
+      return resource.listTransactions(params);
+    }
+  });
+  return cli2;
+}
+
+// src/commands/user-info/index.tsx
+import { Cli as Cli11 } from "incur";
+
+// src/commands/user-info/retrieve.tsx
+import { Box as Box22, Text as Text24 } from "ink";
+import Spinner14 from "ink-spinner";
+import { useCallback as useCallback11 } from "react";
+import { jsx as jsx31, jsxs as jsxs22 } from "react/jsx-runtime";
+var UserInfoRetrieve = ({
+  resource,
+  onComplete
+}) => {
+  const action = useCallback11(() => resource.retrieve(), [resource]);
+  const { status, data: userInfo, error } = useAsyncAction(action, onComplete);
+  if (status === "loading") {
+    return /* @__PURE__ */ jsx31(Box22, { children: /* @__PURE__ */ jsxs22(Text24, { color: "cyan", children: [
+      /* @__PURE__ */ jsx31(Spinner14, { type: "dots" }),
+      " Loading user info..."
+    ] }) });
+  }
+  if (status === "error") {
+    return /* @__PURE__ */ jsxs22(Box22, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx31(Text24, { color: "red", children: "\u2717 Failed to load user info" }),
+      /* @__PURE__ */ jsx31(Text24, { color: "red", children: error })
+    ] });
+  }
+  return /* @__PURE__ */ jsxs22(Box22, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx31(Text24, { bold: true, children: "User Info" }),
+    /* @__PURE__ */ jsxs22(Box22, { flexDirection: "column", marginTop: 1, paddingX: 2, children: [
+      /* @__PURE__ */ jsxs22(Text24, { children: [
+        /* @__PURE__ */ jsx31(Text24, { dimColor: true, children: "Email: " }),
+        userInfo?.email ?? /* @__PURE__ */ jsx31(Text24, { dimColor: true, children: "Not set" })
       ] }),
-      /* @__PURE__ */ jsxs21(Text23, { children: [
-        /* @__PURE__ */ jsx29(Text23, { dimColor: true, children: "Name: " }),
-        userInfo?.name ?? /* @__PURE__ */ jsx29(Text23, { dimColor: true, children: "Not set" })
+      /* @__PURE__ */ jsxs22(Text24, { children: [
+        /* @__PURE__ */ jsx31(Text24, { dimColor: true, children: "Name: " }),
+        userInfo?.name ?? /* @__PURE__ */ jsx31(Text24, { dimColor: true, children: "Not set" })
       ] }),
-      /* @__PURE__ */ jsxs21(Text23, { children: [
-        /* @__PURE__ */ jsx29(Text23, { dimColor: true, children: "Phone: " }),
-        userInfo?.phone ?? /* @__PURE__ */ jsx29(Text23, { dimColor: true, children: "Not set" })
+      /* @__PURE__ */ jsxs22(Text24, { children: [
+        /* @__PURE__ */ jsx31(Text24, { dimColor: true, children: "Phone: " }),
+        userInfo?.phone ?? /* @__PURE__ */ jsx31(Text24, { dimColor: true, children: "Not set" })
       ] })
     ] })
   ] });
 };
 
 // src/commands/user-info/index.tsx
-import { jsx as jsx30 } from "react/jsx-runtime";
+import { jsx as jsx32 } from "react/jsx-runtime";
 function createUserInfoCli(createResource, authStorage2, envAccessToken2) {
-  const cli2 = Cli10.create("user-info", {
+  const cli2 = Cli11.create("user-info", {
     description: "User information commands"
   });
   cli2.command("retrieve", {
@@ -16197,7 +16641,7 @@ function createUserInfoCli(createResource, authStorage2, envAccessToken2) {
       const resource = createResource();
       if (!c.agent && !c.formatExplicit) {
         return renderInteractive(
-          /* @__PURE__ */ jsx30(UserInfoRetrieve, { resource, onComplete: () => {
+          /* @__PURE__ */ jsx32(UserInfoRetrieve, { resource, onComplete: () => {
           } }),
           () => resource.retrieve()
         );
@@ -16488,6 +16932,7 @@ var ResourceFactory = class {
   paymentMethodsResource;
   shippingAddressResource;
   userInfoResource;
+  transactionsResource;
   webBotAuthResource;
   reportResource;
   constructor(options = {}) {
@@ -16602,6 +17047,20 @@ var ResourceFactory = class {
     );
     return this.userInfoResource;
   }
+  createTransactionsResource() {
+    if (this.transactionsResource) {
+      return this.transactionsResource;
+    }
+    const getAccessToken = this.createSdkAccessTokenProvider();
+    this.transactionsResource = sanitizeResource(
+      new TransactionsResource({
+        verbose: this.verbose,
+        defaultHeaders: this.defaultHeaders,
+        getAccessToken
+      })
+    );
+    return this.transactionsResource;
+  }
   createWebBotAuthResource() {
     if (this.webBotAuthResource) {
       return this.webBotAuthResource;
@@ -16703,12 +17162,16 @@ function cacheUpdateInfo(value, ttlMs = UPDATE_CACHE_TTL_MS) {
 }
 
 // src/cli.tsx
-var cliVersion = "0.8.1";
+var cliVersion = "0.8.3";
 var cliName = "@stripe/link-cli";
 var defaultHeaders = {
   "User-Agent": `link-cli/${cliVersion}`
 };
-var verbose = process.argv.includes("--verbose");
+var verboseIndex = process.argv.indexOf("--verbose");
+var verbose = verboseIndex !== -1;
+if (verboseIndex !== -1) {
+  process.argv.splice(verboseIndex, 1);
+}
 var authFileIndex = process.argv.indexOf("--auth");
 var credentialFilePath = authFileIndex !== -1 ? process.argv[authFileIndex + 1] : process.env.LINK_AUTH_FILE;
 if (authFileIndex !== -1) {
@@ -16728,7 +17191,16 @@ var factory = new ResourceFactory({
 });
 var authRepo = factory.createAuthResource();
 var spendRequestRepo = factory.createSpendRequestResource();
-var cli = Cli11.create("link-cli", {
+var requestedCommand = process.argv[2];
+var transactionsCli = requestedCommand === "transactions" ? createTransactionsCli(
+  () => factory.createTransactionsResource(),
+  authStorage,
+  envAccessToken
+) : null;
+if (transactionsCli) {
+  process.argv.splice(2, 1);
+}
+var cli = transactionsCli ?? Cli12.create("link-cli", {
   description: "Create a secure, one-time payment credential from a Link wallet to let agents complete purchases on behalf of users.",
   version: cliVersion
 });
@@ -16745,58 +17217,60 @@ if (!isAgent && process.stdout.isTTY) {
     process.stderr.write(renderInteractiveUpdateNotice(updateInfo));
   }
 }
-cli.command(
-  createAuthCli(authRepo, getUpdateInfo, authStorage, envAccessToken)
-);
-cli.command(
-  createSpendRequestCli(spendRequestRepo, authStorage, envAccessToken)
-);
-cli.command(
-  createPaymentMethodsCli(
-    () => factory.createPaymentMethodsResource(),
-    authStorage,
-    envAccessToken
-  )
-);
-cli.command(
-  createShippingAddressCli(
-    () => factory.createShippingAddressResource(),
-    authStorage,
-    envAccessToken
-  )
-);
-cli.command(
-  createUserInfoCli(
-    () => factory.createUserInfoResource(),
-    authStorage,
-    envAccessToken
-  )
-);
-cli.command(createMppCli(spendRequestRepo, authStorage, envAccessToken));
-cli.command(
-  createReportCli(
-    () => factory.createReportResource(),
-    authStorage,
-    envAccessToken
-  )
-);
-cli.command(
-  createDemoCli(
-    authRepo,
-    spendRequestRepo,
-    () => factory.createPaymentMethodsResource(),
-    authStorage
-  )
-);
-cli.command(
-  createOnboardCli(
-    authRepo,
-    spendRequestRepo,
-    () => factory.createPaymentMethodsResource(),
-    authStorage
-  )
-);
-cli.command(createServeCli(cli));
+if (!transactionsCli) {
+  cli.command(
+    createAuthCli(authRepo, getUpdateInfo, authStorage, envAccessToken)
+  );
+  cli.command(
+    createSpendRequestCli(spendRequestRepo, authStorage, envAccessToken)
+  );
+  cli.command(
+    createPaymentMethodsCli(
+      () => factory.createPaymentMethodsResource(),
+      authStorage,
+      envAccessToken
+    )
+  );
+  cli.command(
+    createShippingAddressCli(
+      () => factory.createShippingAddressResource(),
+      authStorage,
+      envAccessToken
+    )
+  );
+  cli.command(
+    createUserInfoCli(
+      () => factory.createUserInfoResource(),
+      authStorage,
+      envAccessToken
+    )
+  );
+  cli.command(createMppCli(spendRequestRepo, authStorage, envAccessToken));
+  cli.command(
+    createReportCli(
+      () => factory.createReportResource(),
+      authStorage,
+      envAccessToken
+    )
+  );
+  cli.command(
+    createDemoCli(
+      authRepo,
+      spendRequestRepo,
+      () => factory.createPaymentMethodsResource(),
+      authStorage
+    )
+  );
+  cli.command(
+    createOnboardCli(
+      authRepo,
+      spendRequestRepo,
+      () => factory.createPaymentMethodsResource(),
+      authStorage
+    )
+  );
+  cli.command(createServeCli(cli));
+}
 cli.serve();
 var cli_default = cli;
 export {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stripe/link-cli",
-  "version": "0.8.1",
+  "version": "0.8.3",
   "type": "module",
   "bin": {
     "link-cli": "./dist/cli.js"