@stripe/link-cli 0.8.2 → 0.9.0

package/dist/cli.js

@@ -8835,19 +8835,19 @@ var require_range = __commonJS({
     var replaceCaret = (comp, options) => {
       debug("caret", comp, options);
       const r = options.loose ? re[t.CARETLOOSE] : re[t.CARET];
-      const z10 = options.includePrerelease ? "-0" : "";
+      const z13 = options.includePrerelease ? "-0" : "";
       return comp.replace(r, (_, M, m, p, pr) => {
         debug("caret", comp, _, M, m, p, pr);
         let ret;
         if (isX(M)) {
           ret = "";
         } else if (isX(m)) {
-          ret = `>=${M}.0.0${z10} <${+M + 1}.0.0-0`;
+          ret = `>=${M}.0.0${z13} <${+M + 1}.0.0-0`;
         } else if (isX(p)) {
           if (M === "0") {
-            ret = `>=${M}.${m}.0${z10} <${M}.${+m + 1}.0-0`;
+            ret = `>=${M}.${m}.0${z13} <${M}.${+m + 1}.0-0`;
           } else {
-            ret = `>=${M}.${m}.0${z10} <${+M + 1}.0.0-0`;
+            ret = `>=${M}.${m}.0${z13} <${+M + 1}.0.0-0`;
           }
         } else if (pr) {
           debug("replaceCaret pr", pr);
@@ -8864,9 +8864,9 @@ var require_range = __commonJS({
           debug("no pr");
           if (M === "0") {
             if (m === "0") {
-              ret = `>=${M}.${m}.${p}${z10} <${M}.${m}.${+p + 1}-0`;
+              ret = `>=${M}.${m}.${p}${z13} <${M}.${m}.${+p + 1}-0`;
             } else {
-              ret = `>=${M}.${m}.${p}${z10} <${M}.${+m + 1}.0-0`;
+              ret = `>=${M}.${m}.${p}${z13} <${M}.${+m + 1}.0-0`;
             }
           } else {
             ret = `>=${M}.${m}.${p} <${+M + 1}.0.0-0`;
@@ -11148,6 +11148,173 @@ function requireFetchImplementation(config) {
   }
   return config.fetch;
 }
+function isRecord(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function requireBoolean(value, field) {
+  if (typeof value !== "boolean") {
+    throw new TypeError(`Expected ${field} to be a boolean`);
+  }
+  return value;
+}
+function extractErrorMessage(data, rawBody) {
+  if (isRecord(data)) {
+    if (typeof data.error === "string") {
+      return data.error;
+    }
+    if (isRecord(data.error)) {
+      const nested = data.error;
+      if (typeof nested.message === "string") {
+        return nested.message;
+      }
+      if (typeof nested.code === "string") {
+        return nested.code;
+      }
+    }
+    if (typeof data.message === "string") {
+      return data.message;
+    }
+  }
+  return rawBody || "unknown error";
+}
+var BaseResource = class {
+  verbose;
+  getAccessToken;
+  fetchImpl;
+  endpoint;
+  logger;
+  constructor(options, endpointPath) {
+    const config = resolveLinkSdkConfig(options);
+    this.verbose = config.verbose;
+    this.getAccessToken = config.getAccessToken;
+    this.fetchImpl = requireFetchImplementation(config);
+    this.endpoint = `${config.apiBaseUrl}${endpointPath}`;
+    this.logger = config.logger;
+  }
+  async rawFetch(opts) {
+    if (this.verbose) {
+      const redactedHeaders = { ...opts.headers };
+      if (redactedHeaders.Authorization)
+        redactedHeaders.Authorization = "Bearer <redacted>";
+      this.logger.debug(`> ${opts.method} ${opts.url}`);
+      this.logger.debug(`  Headers: ${JSON.stringify(redactedHeaders)}`);
+    }
+    let response;
+    try {
+      response = await this.fetchImpl(opts.url, {
+        method: opts.method,
+        headers: opts.headers
+      });
+    } catch (error) {
+      throw new LinkTransportError(
+        `Request failed: ${opts.method} ${opts.url}`,
+        { cause: error }
+      );
+    }
+    const rawBody = await response.text();
+    let data = null;
+    try {
+      data = JSON.parse(rawBody);
+    } catch {
+    }
+    if (this.verbose) {
+      this.logger.debug(`< ${response.status} ${response.statusText}`);
+      response.headers.forEach((value, key) => {
+        this.logger.debug(`  ${key}: ${value}`);
+      });
+      this.logger.debug(rawBody);
+    }
+    return { status: response.status, data, rawBody };
+  }
+  async apiFetch(opts) {
+    const token = await this.getAccessToken();
+    const authedOpts = {
+      ...opts,
+      headers: {
+        ...opts.headers,
+        Authorization: `Bearer ${token}`
+      }
+    };
+    const res = await this.rawFetch(authedOpts);
+    if (res.status === 401) {
+      const refreshedToken = await this.getAccessToken({ forceRefresh: true });
+      authedOpts.headers.Authorization = `Bearer ${refreshedToken}`;
+      return this.rawFetch(authedOpts);
+    }
+    return res;
+  }
+  throwApiError(operation, status, data, rawBody, cause) {
+    const msg = extractErrorMessage(data, rawBody);
+    throw new LinkApiError(`Failed to ${operation} (${status}): ${msg}`, {
+      status,
+      rawBody,
+      details: data,
+      cause
+    });
+  }
+};
+function normalizeBalances(value) {
+  if (!Array.isArray(value)) {
+    throw new TypeError("Expected balances to be an array");
+  }
+  return value.map((item, index) => {
+    if (!isRecord(item)) {
+      throw new TypeError(`Expected balances[${index}] to be an object`);
+    }
+    return item;
+  });
+}
+function normalizeBalancesPage(value) {
+  if (!isRecord(value)) {
+    throw new TypeError("Expected response body to be an object");
+  }
+  const { data, has_more, ...rest } = value;
+  const normalized = normalizeBalances(data);
+  return {
+    ...rest,
+    data: normalized,
+    ...has_more !== void 0 ? { has_more: requireBoolean(has_more, "has_more") } : {}
+  };
+}
+var BalancesResource = class extends BaseResource {
+  constructor(options = {}) {
+    super(options, "/balances");
+  }
+  buildUrl(params) {
+    const url = new URL(this.endpoint);
+    if (params.limit !== void 0) {
+      url.searchParams.set("limit", String(params.limit));
+    }
+    if (params.starting_after !== void 0) {
+      url.searchParams.set("starting_after", params.starting_after);
+    }
+    if (params.ending_before !== void 0) {
+      url.searchParams.set("ending_before", params.ending_before);
+    }
+    return url.toString();
+  }
+  list(params = {}) {
+    return this.listBalances(params);
+  }
+  async listBalances(params = {}) {
+    const { status, data, rawBody } = await this.apiFetch({
+      method: "GET",
+      url: this.buildUrl(params)
+    });
+    if (status < 200 || status >= 300) {
+      this.throwApiError("list balances", status, data, rawBody);
+    }
+    try {
+      return normalizeBalancesPage(data);
+    } catch (error) {
+      const reason = error instanceof Error ? `: ${error.message}` : "";
+      throw new LinkApiError(
+        `Failed to list balances (${status}): invalid response shape${reason}`,
+        { status, rawBody, details: data, cause: error }
+      );
+    }
+  }
+};
 var PaymentMethodsResource = class {
   verbose;
   getAccessToken;
@@ -11318,6 +11485,68 @@ var ShippingAddressResource = class {
     return body?.shipping_addresses ?? [];
   }
 };
+function normalizeSources(value) {
+  if (!Array.isArray(value)) {
+    throw new TypeError("Expected sources to be an array");
+  }
+  return value.map((item, index) => {
+    if (!isRecord(item)) {
+      throw new TypeError(`Expected sources[${index}] to be an object`);
+    }
+    return item;
+  });
+}
+function normalizeSourcesPage(value) {
+  if (!isRecord(value)) {
+    throw new TypeError("Expected response body to be an object");
+  }
+  const { data, has_more, ...rest } = value;
+  const normalized = normalizeSources(data);
+  return {
+    ...rest,
+    data: normalized,
+    ...has_more !== void 0 ? { has_more: requireBoolean(has_more, "has_more") } : {}
+  };
+}
+var SourcesResource = class extends BaseResource {
+  constructor(options = {}) {
+    super(options, "/sources");
+  }
+  buildUrl(params) {
+    const url = new URL(this.endpoint);
+    if (params.limit !== void 0) {
+      url.searchParams.set("limit", String(params.limit));
+    }
+    if (params.starting_after !== void 0) {
+      url.searchParams.set("starting_after", params.starting_after);
+    }
+    if (params.ending_before !== void 0) {
+      url.searchParams.set("ending_before", params.ending_before);
+    }
+    return url.toString();
+  }
+  list(params = {}) {
+    return this.listSources(params);
+  }
+  async listSources(params = {}) {
+    const { status, data, rawBody } = await this.apiFetch({
+      method: "GET",
+      url: this.buildUrl(params)
+    });
+    if (status < 200 || status >= 300) {
+      this.throwApiError("list sources", status, data, rawBody);
+    }
+    try {
+      return normalizeSourcesPage(data);
+    } catch (error) {
+      const reason = error instanceof Error ? `: ${error.message}` : "";
+      throw new LinkApiError(
+        `Failed to list sources (${status}): invalid response shape${reason}`,
+        { status, rawBody, details: data, cause: error }
+      );
+    }
+  }
+};
 function normalizeSpendRequest(data) {
   const sr = data;
   if (typeof sr.shared_payment_token === "string") {
@@ -11524,6 +11753,140 @@ var SpendRequestResource = class {
     return normalizeSpendRequest(data);
   }
 };
+function requireString(value, field) {
+  if (typeof value !== "string") {
+    throw new TypeError(`Expected ${field} to be a string`);
+  }
+  return value;
+}
+function requireNullableString(value, field) {
+  if (value === null) {
+    return null;
+  }
+  if (typeof value !== "string") {
+    throw new TypeError(`Expected ${field} to be a string or null`);
+  }
+  return value;
+}
+function requireNumber(value, field) {
+  if (typeof value !== "number" || !Number.isFinite(value)) {
+    throw new TypeError(`Expected ${field} to be a finite number`);
+  }
+  return value;
+}
+function requireTransactionOrigin(value, field) {
+  if (value === "link" || value === "external_connection") {
+    return value;
+  }
+  throw new TypeError(`Expected ${field} to be a transaction origin`);
+}
+function normalizeTransactions(value) {
+  if (!Array.isArray(value)) {
+    throw new TypeError("Expected transactions to be an array");
+  }
+  return value.map((item, index) => {
+    if (!isRecord(item)) {
+      throw new TypeError(`Expected transactions[${index}] to be an object`);
+    }
+    return {
+      id: requireString(item.id, `transactions[${index}].id`),
+      source_id: requireNullableString(
+        item.source_id,
+        `transactions[${index}].source_id`
+      ),
+      amount: requireNumber(item.amount, `transactions[${index}].amount`),
+      currency: requireString(item.currency, `transactions[${index}].currency`),
+      created_date: requireString(
+        item.created_date,
+        `transactions[${index}].created_date`
+      ),
+      description: requireString(
+        item.description,
+        `transactions[${index}].description`
+      ),
+      origin: requireTransactionOrigin(
+        item.origin,
+        `transactions[${index}].origin`
+      ),
+      category: requireNullableString(
+        item.category,
+        `transactions[${index}].category`
+      ),
+      status: requireString(item.status, `transactions[${index}].status`)
+    };
+  });
+}
+function normalizeTransactionsPage(value) {
+  if (Array.isArray(value)) {
+    return { data: normalizeTransactions(value) };
+  }
+  if (!isRecord(value)) {
+    throw new TypeError("Expected response body to be an object");
+  }
+  const { data, has_more, ...rest } = value;
+  const normalized = normalizeTransactions(data);
+  return {
+    ...rest,
+    data: normalized,
+    ...has_more !== void 0 ? { has_more: requireBoolean(has_more, "has_more") } : {}
+  };
+}
+var TransactionsResource = class extends BaseResource {
+  constructor(options = {}) {
+    super(options, "/transactions");
+  }
+  buildUrl(params) {
+    const url = new URL(this.endpoint);
+    if (params.limit !== void 0) {
+      url.searchParams.set("limit", String(params.limit));
+    }
+    if (params.starting_after !== void 0) {
+      url.searchParams.set("starting_after", params.starting_after);
+    }
+    if (params.ending_before !== void 0) {
+      url.searchParams.set("ending_before", params.ending_before);
+    }
+    if (params.start_date !== void 0) {
+      url.searchParams.set("date_start", params.start_date);
+    }
+    if (params.end_date !== void 0) {
+      url.searchParams.set("date_end", params.end_date);
+    }
+    if (params.category !== void 0) {
+      url.searchParams.set("category", params.category);
+    }
+    if (params.origin !== void 0) {
+      url.searchParams.set("origin", params.origin);
+    }
+    if (params.sources !== void 0) {
+      for (const source of params.sources) {
+        url.searchParams.append("sources[]", source);
+      }
+    }
+    return url.toString();
+  }
+  list(params = {}) {
+    return this.listTransactions(params);
+  }
+  async listTransactions(params = {}) {
+    const { status, data, rawBody } = await this.apiFetch({
+      method: "GET",
+      url: this.buildUrl(params)
+    });
+    if (status < 200 || status >= 300) {
+      this.throwApiError("list transactions", status, data, rawBody);
+    }
+    try {
+      return normalizeTransactionsPage(data);
+    } catch (error) {
+      const reason = error instanceof Error ? `: ${error.message}` : "";
+      throw new LinkApiError(
+        `Failed to list transactions (${status}): invalid response shape${reason}`,
+        { status, rawBody, details: data, cause: error }
+      );
+    }
+  }
+};
 var UserInfoResource = class {
   verbose;
   getAccessToken;
@@ -11616,6 +11979,12 @@ var UserInfoResource = class {
     };
   }
 };
+var SOURCE_ACTIONS = [
+  "read_balances",
+  "read_external_transactions",
+  "read_link_transactions",
+  "read_source_details"
+];
 var REPORT_OUTCOMES = ["success", "blocked", "abandoned"];
 var REPORT_TAGS = [
   "stripe_checkout",
@@ -11843,12 +12212,69 @@ var ReportResource = class {
 };
 
 // src/cli.tsx
-import { Cli as Cli11 } from "incur";
+import { Cli as Cli14 } from "incur";
 
 // src/commands/auth/index.tsx
 import { Cli } from "incur";
 import { Text as Text4 } from "ink";
 
+// src/auth/authorization-details.ts
+var INVALID_AUTHORIZATION_DETAIL_MESSAGE = "authorization-detail must be valid JSON";
+function dedupe(values) {
+  const seen = /* @__PURE__ */ new Set();
+  const result = [];
+  for (const value of values) {
+    if (seen.has(value)) {
+      continue;
+    }
+    seen.add(value);
+    result.push(value);
+  }
+  return result;
+}
+function parseAuthorizationDetails(entries) {
+  const parsed = [];
+  for (const entry of entries ?? []) {
+    try {
+      parsed.push(JSON.parse(entry));
+    } catch {
+      throw new Error(INVALID_AUTHORIZATION_DETAIL_MESSAGE);
+    }
+  }
+  return parsed;
+}
+function buildAuthorizationDetails(sourceActions, authorizationDetails) {
+  const details = [];
+  const uniqueSourceActions = dedupe(sourceActions ?? []);
+  if (uniqueSourceActions.length > 0) {
+    details.push({
+      type: "source",
+      actions: uniqueSourceActions
+    });
+  }
+  if (authorizationDetails) {
+    details.push(...authorizationDetails);
+  }
+  return details;
+}
+
+// src/auth/scopes.ts
+var DEFAULT_SCOPES = [
+  "userinfo:read",
+  "payment_methods.agentic"
+];
+var DEFAULT_SCOPE = DEFAULT_SCOPES.join(" ");
+function parseScopeTokens(scope) {
+  return scope.trim().split(/\s+/).filter(Boolean);
+}
+function normalizeScopeInput(scope) {
+  if (scope === void 0) {
+    return void 0;
+  }
+  const normalized = parseScopeTokens(scope);
+  return normalized.length > 0 ? normalized.join(" ") : void 0;
+}
+
 // src/utils/poll-until.ts
 async function* pollUntil(options) {
   const { fn, isTerminal, interval, timeout, maxAttempts } = options;
@@ -11965,6 +12391,9 @@ import { jsx, jsxs } from "react/jsx-runtime";
 var Login = ({
   authResource,
   clientName,
+  scope,
+  sourceActions,
+  authorizationDetails,
   authStorage: authStorage2 = storage,
   onComplete
 }) => {
@@ -11985,7 +12414,12 @@ var Login = ({
   useEffect(() => {
     const initAuth = async () => {
       try {
-        const authRequest = await authResource.initiateDeviceAuth(clientName);
+        const authRequest = await authResource.initiateDeviceAuth({
+          clientName,
+          scope,
+          sourceActions,
+          authorizationDetails
+        });
         setUserCode(authRequest.user_code);
         setVerificationUrl(authRequest.verification_url_complete);
         setDeviceCode(authRequest.device_code);
@@ -11996,7 +12430,7 @@ var Login = ({
       }
     };
     initAuth();
-  }, [authResource, clientName]);
+  }, [authResource, authorizationDetails, clientName, scope, sourceActions]);
   useEffect(() => {
     if (status !== "waiting" || !deviceCode) return;
     const startPolling = async () => {
@@ -12035,17 +12469,17 @@ var Login = ({
   if (status === "declined") {
     return /* @__PURE__ */ jsxs(Box, { flexDirection: "column", children: [
       /* @__PURE__ */ jsx(Text, { color: "red", children: "\u2717 Authorization failed" }),
-      Object.entries(scopeEligibility).map(([scope, info]) => /* @__PURE__ */ jsxs(Box, { flexDirection: "column", marginLeft: 2, children: [
+      Object.entries(scopeEligibility).map(([scope2, info]) => /* @__PURE__ */ jsxs(Box, { flexDirection: "column", marginLeft: 2, children: [
         /* @__PURE__ */ jsxs(Text, { children: [
           /* @__PURE__ */ jsxs(Text, { dimColor: true, children: [
-            scope,
+            scope2,
             ":"
           ] }),
           " ineligible",
           info.ineligibility_reasons.length > 0 ? ` (${info.ineligibility_reasons.join(", ")})` : ""
         ] }),
         info.description ? /* @__PURE__ */ jsx(Text, { dimColor: true, children: info.description }) : null
-      ] }, scope))
+      ] }, scope2))
     ] });
   }
   if (status === "error") {
@@ -12169,10 +12603,18 @@ var Logout = ({
 
 // src/commands/auth/schema.ts
 import { z } from "incur";
+var SOURCE_ACTIONS_DESCRIPTION = SOURCE_ACTIONS.join(", ");
 var loginOptions = z.object({
   clientName: z.string().default("Link CLI").describe(
     "Agent or app name shown in the Link app when approving the device connection"
   ),
+  scope: z.string().optional().describe(
+    "Optional space-separated Link scopes to request. Quote the value when passing multiple scopes."
+  ),
+  sourceActions: z.array(z.enum(SOURCE_ACTIONS)).default([]).describe(
+    `Source action to request via authorization_details (repeatable). Accepted values: ${SOURCE_ACTIONS_DESCRIPTION}.`
+  ),
+  authorizationDetail: z.array(z.string()).default([]).describe("Freeform authorization_details entry as raw JSON (repeatable)."),
   interval: z.coerce.number().default(0).describe(
     "Poll interval in seconds. When > 0, polls until authenticated or timeout is reached, yielding status on each attempt."
   ),
@@ -12328,12 +12770,30 @@ function createAuthCli(authResource, getUpdateInfo2, authStorage2, envAccessToke
     outputPolicy: "agent-only",
     async *run(c) {
       const clientName = c.options.clientName?.trim();
+      const scope = normalizeScopeInput(c.options.scope);
+      let authorizationDetails;
       if (!clientName || clientName.length === 0) {
         return c.error({
           code: "INVALID_INPUT",
           message: "client-name must be a non-empty string"
         });
       }
+      if (c.options.scope !== void 0 && !scope) {
+        return c.error({
+          code: "INVALID_INPUT",
+          message: "scope must be a non-empty string when provided"
+        });
+      }
+      try {
+        authorizationDetails = parseAuthorizationDetails(
+          c.options.authorizationDetail
+        );
+      } catch (error) {
+        return c.error({
+          code: "INVALID_INPUT",
+          message: error.message
+        });
+      }
       const existingAuth = storage2.getAuth();
       if (existingAuth?.refresh_token) {
         try {
@@ -12365,6 +12825,9 @@ function createAuthCli(authResource, getUpdateInfo2, authStorage2, envAccessToke
             {
               authResource,
               clientName,
+              scope,
+              sourceActions: c.options.sourceActions,
+              authorizationDetails,
               authStorage: storage2,
               onComplete: () => {
               }
@@ -12373,7 +12836,12 @@ function createAuthCli(authResource, getUpdateInfo2, authStorage2, envAccessToke
           () => ({ authenticated: true, token_type: "Bearer" })
         );
       }
-      const authRequest = await authResource.initiateDeviceAuth(clientName);
+      const authRequest = await authResource.initiateDeviceAuth({
+        clientName,
+        scope,
+        sourceActions: c.options.sourceActions,
+        authorizationDetails
+      });
       storage2.setPendingDeviceAuth({
         device_code: authRequest.device_code,
         interval: authRequest.interval,
@@ -12503,29 +12971,200 @@ function createAuthCli(authResource, getUpdateInfo2, authStorage2, envAccessToke
   return cli2;
 }
 
+// src/commands/balances/index.tsx
+import { Cli as Cli2 } from "incur";
+
+// src/utils/require-auth.ts
+var NOT_AUTHENTICATED_ERROR = {
+  code: "NOT_AUTHENTICATED",
+  message: 'Not authenticated. Run "link-cli auth login" first.',
+  cta: {
+    commands: [{ command: "auth login", description: "Log in to Link" }]
+  }
+};
+function requireAuth(authStorage2, envAccessToken2) {
+  const store = authStorage2 ?? storage;
+  return (c, next) => {
+    if (!envAccessToken2 && !store.isAuthenticated()) {
+      return c.error(NOT_AUTHENTICATED_ERROR);
+    }
+    return next();
+  };
+}
+function requireAuthGuard(c, authStorage2, envAccessToken2) {
+  const store = authStorage2 ?? storage;
+  if (!envAccessToken2 && !store.isAuthenticated()) {
+    c.error(NOT_AUTHENTICATED_ERROR);
+  }
+}
+
+// src/commands/balances/list.tsx
+import { Box as Box4, Text as Text5 } from "ink";
+import Spinner3 from "ink-spinner";
+import { useCallback as useCallback2 } from "react";
+import { jsx as jsx5, jsxs as jsxs4 } from "react/jsx-runtime";
+var COLUMN_GAP = "  ";
+var SOURCE_ID_MIN = 16;
+var SOURCE_ID_MAX = 48;
+var TYPE_WIDTH = 12;
+var CURRENT_WIDTH = 15;
+var CURRENCY_WIDTH = 8;
+function truncateCell(value, width) {
+  if (value.length <= width) {
+    return value;
+  }
+  if (width <= 3) {
+    return value.slice(0, width);
+  }
+  return `${value.slice(0, width - 3)}...`;
+}
+function formatCell(value, width) {
+  return truncateCell(value, width).padEnd(width);
+}
+function formatCents(cents) {
+  const dollars = Math.abs(cents) / 100;
+  const formatted = `$${dollars.toFixed(2)}`;
+  return cents < 0 ? `-${formatted}` : formatted;
+}
+function sourceIdWidth(balances) {
+  if (balances.length === 0) return SOURCE_ID_MIN;
+  const maxLen = Math.max(...balances.map((b) => (b.source_id ?? "").length));
+  return Math.min(SOURCE_ID_MAX, Math.max(SOURCE_ID_MIN, maxLen));
+}
+var BalancesList = ({
+  resource,
+  params,
+  onComplete
+}) => {
+  const action = useCallback2(
+    () => resource.listBalances(params),
+    [resource, params]
+  );
+  const { status, data: page, error } = useAsyncAction(action, onComplete);
+  const balances = page?.data ?? [];
+  const nextCursor = page?.has_more && balances.length > 0 ? balances[balances.length - 1].source_id : null;
+  const idWidth = sourceIdWidth(balances);
+  const headerRow = [
+    formatCell("Source ID", idWidth),
+    formatCell("Balance type", TYPE_WIDTH),
+    formatCell("Current balance", CURRENT_WIDTH),
+    formatCell("Currency", CURRENCY_WIDTH)
+  ].join(COLUMN_GAP);
+  const separatorRow = "-".repeat(headerRow.length);
+  const rows = balances.map(
+    (balance) => [
+      formatCell(balance.source_id ?? "-", idWidth),
+      formatCell(balance.type ?? "-", TYPE_WIDTH),
+      formatCell(
+        balance.current != null ? formatCents(balance.current) : "-",
+        CURRENT_WIDTH
+      ),
+      formatCell(balance.currency ?? "-", CURRENCY_WIDTH)
+    ].join(COLUMN_GAP)
+  );
+  if (status === "loading") {
+    return /* @__PURE__ */ jsx5(Box4, { children: /* @__PURE__ */ jsxs4(Text5, { color: "cyan", children: [
+      /* @__PURE__ */ jsx5(Spinner3, { type: "dots" }),
+      " Loading balances..."
+    ] }) });
+  }
+  if (status === "error") {
+    return /* @__PURE__ */ jsxs4(Box4, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx5(Text5, { color: "red", children: "Failed to load balances" }),
+      /* @__PURE__ */ jsx5(Text5, { color: "red", children: error })
+    ] });
+  }
+  if (balances.length === 0) {
+    return /* @__PURE__ */ jsx5(Box4, { children: /* @__PURE__ */ jsx5(Text5, { dimColor: true, children: "No balances found" }) });
+  }
+  return /* @__PURE__ */ jsxs4(Box4, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx5(Text5, { bold: true, children: "Balances" }),
+    /* @__PURE__ */ jsxs4(Box4, { flexDirection: "column", marginTop: 1, paddingX: 2, children: [
+      /* @__PURE__ */ jsx5(Text5, { bold: true, children: headerRow }),
+      /* @__PURE__ */ jsx5(Text5, { dimColor: true, children: separatorRow }),
+      rows.map((row, index) => /* @__PURE__ */ jsx5(Text5, { children: row }, balances[index].source_id ?? `balance-${index}`))
+    ] }),
+    page?.has_more !== void 0 ? /* @__PURE__ */ jsxs4(Box4, { flexDirection: "column", marginTop: 1, children: [
+      /* @__PURE__ */ jsxs4(Text5, { dimColor: true, children: [
+        "has_more: ",
+        String(page.has_more)
+      ] }),
+      typeof nextCursor === "string" && nextCursor.length > 0 ? /* @__PURE__ */ jsx5(Text5, { dimColor: true, children: `next page: --starting-after ${nextCursor}` }) : null
+    ] }) : null
+  ] });
+};
+
+// src/commands/balances/schema.ts
+import { z as z2 } from "incur";
+var listOptions = z2.object({
+  limit: z2.coerce.number().int().positive().max(100).optional().describe("Maximum number of balances to return (1-100)."),
+  startingAfter: z2.string().optional().describe("Cursor: return balances after this balance ID."),
+  endingBefore: z2.string().optional().describe("Cursor: return balances before this balance ID.")
+});
+
+// src/commands/balances/index.tsx
+import { jsx as jsx6 } from "react/jsx-runtime";
+function createBalancesCli(createResource, authStorage2, envAccessToken2) {
+  const cli2 = Cli2.create("balances", {
+    description: "List balances from your Link wallet"
+  });
+  cli2.command("list", {
+    description: "List balances from your Link wallet",
+    options: listOptions,
+    outputPolicy: "agent-only",
+    middleware: [requireAuth(authStorage2, envAccessToken2)],
+    async run(c) {
+      const opts = c.options;
+      const resource = createResource();
+      const params = {};
+      if (opts.limit !== void 0) params.limit = opts.limit;
+      if (opts.startingAfter !== void 0)
+        params.starting_after = opts.startingAfter;
+      if (opts.endingBefore !== void 0)
+        params.ending_before = opts.endingBefore;
+      if (!c.agent && !c.formatExplicit) {
+        return renderInteractive(
+          /* @__PURE__ */ jsx6(
+            BalancesList,
+            {
+              resource,
+              params,
+              onComplete: () => {
+              }
+            }
+          ),
+          () => resource.listBalances(params)
+        );
+      }
+      return resource.listBalances(params);
+    }
+  });
+  return cli2;
+}
+
 // src/commands/demo/index.tsx
-import { Cli as Cli2, z as z2 } from "incur";
+import { Cli as Cli3, z as z3 } from "incur";
 
 // src/commands/demo/demo-runner.tsx
-import { Box as Box8, Text as Text10, useApp, useInput as useInput4 } from "ink";
-import { useCallback as useCallback2, useState as useState7 } from "react";
+import { Box as Box9, Text as Text11, useApp, useInput as useInput4 } from "ink";
+import { useCallback as useCallback3, useState as useState7 } from "react";
 
 // src/utils/markdown-text.tsx
-import { Text as Text5 } from "ink";
-import { jsx as jsx5 } from "react/jsx-runtime";
+import { Text as Text6 } from "ink";
+import { jsx as jsx7 } from "react/jsx-runtime";
 var MarkdownText = ({
   children,
   dimColor
 }) => {
   const parts = tokenize(children);
-  return /* @__PURE__ */ jsx5(Text5, { dimColor, children: parts.map((part) => {
+  return /* @__PURE__ */ jsx7(Text6, { dimColor, children: parts.map((part) => {
     if (part.type === "bold") {
-      return /* @__PURE__ */ jsx5(Text5, { bold: true, children: part.text }, part.key);
+      return /* @__PURE__ */ jsx7(Text6, { bold: true, children: part.text }, part.key);
     }
     if (part.type === "code") {
-      return /* @__PURE__ */ jsx5(Text5, { color: "yellow", children: part.text }, part.key);
+      return /* @__PURE__ */ jsx7(Text6, { color: "yellow", children: part.text }, part.key);
     }
-    return /* @__PURE__ */ jsx5(Text5, { children: part.text }, part.key);
+    return /* @__PURE__ */ jsx7(Text6, { children: part.text }, part.key);
   }) });
 };
 function tokenize(input) {
@@ -12560,7 +13199,7 @@ function tokenize(input) {
 }
 
 // src/commands/spend-request/app-download-qr-codes.tsx
-import { Box as Box4, Text as Text6 } from "ink";
+import { Box as Box5, Text as Text7 } from "ink";
 import { useMemo } from "react";
 
 // src/utils/render-qr-matrix.ts
@@ -12597,24 +13236,24 @@ function renderQrMatrix(url) {
 }
 
 // src/commands/spend-request/app-download-qr-codes.tsx
-import { jsx as jsx6, jsxs as jsxs4 } from "react/jsx-runtime";
+import { jsx as jsx8, jsxs as jsxs5 } from "react/jsx-runtime";
 var DOWNLOAD_URL = "https://link.com/download";
 var AppDownloadQrCodes = () => {
   const qrLines = useMemo(() => renderQrMatrix(DOWNLOAD_URL), []);
-  return /* @__PURE__ */ jsxs4(Box4, { flexDirection: "column", marginTop: 1, children: [
-    /* @__PURE__ */ jsx6(Text6, { dimColor: true, children: "Get the Link app to approve spend requests from your phone" }),
-    /* @__PURE__ */ jsxs4(Box4, { flexDirection: "column", alignItems: "flex-start", marginTop: 1, children: [
+  return /* @__PURE__ */ jsxs5(Box5, { flexDirection: "column", marginTop: 1, children: [
+    /* @__PURE__ */ jsx8(Text7, { dimColor: true, children: "Get the Link app to approve spend requests from your phone" }),
+    /* @__PURE__ */ jsxs5(Box5, { flexDirection: "column", alignItems: "flex-start", marginTop: 1, children: [
       qrLines.map((line, i) => (
         // biome-ignore lint/suspicious/noArrayIndexKey: stable static array
-        /* @__PURE__ */ jsx6(Text6, { children: line }, i)
+        /* @__PURE__ */ jsx8(Text7, { children: line }, i)
       )),
-      /* @__PURE__ */ jsx6(Text6, { dimColor: true, children: DOWNLOAD_URL })
+      /* @__PURE__ */ jsx8(Text7, { dimColor: true, children: DOWNLOAD_URL })
     ] })
   ] });
 };
 
 // src/commands/demo/card-flow.tsx
-import { Box as Box5, Text as Text7, useInput as useInput2 } from "ink";
+import { Box as Box6, Text as Text8, useInput as useInput2 } from "ink";
 import { useEffect as useEffect4, useRef as useRef2, useState as useState4 } from "react";
 
 // src/utils/poll-until-approved.ts
@@ -12779,7 +13418,7 @@ var ONBOARD = {
 };
 
 // src/commands/demo/card-flow.tsx
-import { Fragment, jsx as jsx7, jsxs as jsxs5 } from "react/jsx-runtime";
+import { Fragment, jsx as jsx9, jsxs as jsxs6 } from "react/jsx-runtime";
 function formatPmLabel(pm) {
   return `${pm.card_details?.brand ?? pm.type} ****${pm.card_details?.last4 ?? ""}`;
 }
@@ -12963,22 +13602,22 @@ var CardFlow = ({
     ];
     return order.indexOf(step) > order.indexOf(target);
   };
-  const prompt = (label = "Press [Enter] to continue") => /* @__PURE__ */ jsxs5(Text7, { dimColor: true, children: [
+  const prompt = (label = "Press [Enter] to continue") => /* @__PURE__ */ jsxs6(Text8, { dimColor: true, children: [
     "\n",
     ">",
     " ",
     label
   ] });
-  return /* @__PURE__ */ jsxs5(Box5, { flexDirection: "column", gap: 1, children: [
-    /* @__PURE__ */ jsx7(Text7, { bold: true, color: "cyan", children: CARD_FLOW.title }),
-    /* @__PURE__ */ jsxs5(Box5, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsxs5(Box5, { flexDirection: "row", gap: 1, children: [
-        /* @__PURE__ */ jsx7(Text7, { color: "yellow", children: "[testmode]" }),
-        /* @__PURE__ */ jsx7(Text7, { dimColor: true, children: DEMO_MERCHANT_URL })
+  return /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", gap: 1, children: [
+    /* @__PURE__ */ jsx9(Text8, { bold: true, color: "cyan", children: CARD_FLOW.title }),
+    /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsxs6(Box6, { flexDirection: "row", gap: 1, children: [
+        /* @__PURE__ */ jsx9(Text8, { color: "yellow", children: "[testmode]" }),
+        /* @__PURE__ */ jsx9(Text8, { dimColor: true, children: DEMO_MERCHANT_URL })
       ] }),
-      /* @__PURE__ */ jsx7(MarkdownText, { children: CARD_FLOW.intro.description }),
-      /* @__PURE__ */ jsxs5(Box5, { marginTop: 1, flexDirection: "column", children: [
-        /* @__PURE__ */ jsx7(Text7, { children: "What happens:" }),
+      /* @__PURE__ */ jsx9(MarkdownText, { children: CARD_FLOW.intro.description }),
+      /* @__PURE__ */ jsxs6(Box6, { marginTop: 1, flexDirection: "column", children: [
+        /* @__PURE__ */ jsx9(Text8, { children: "What happens:" }),
         CARD_FLOW.intro.steps.map((s, i) => {
           const doneAfter = [
             "pick-pm",
@@ -12994,17 +13633,17 @@ var CardFlow = ({
           ];
           const done = pastStep(doneAfter[i]);
           const active = !done && (step === activeFrom[i] || pastStep(activeFrom[i]));
-          return done ? /* @__PURE__ */ jsxs5(Text7, { dimColor: true, strikethrough: true, children: [
+          return done ? /* @__PURE__ */ jsxs6(Text8, { dimColor: true, strikethrough: true, children: [
             " ",
             i + 1,
             ". ",
             s
-          ] }, s) : active ? /* @__PURE__ */ jsxs5(Text7, { bold: true, color: "cyan", children: [
+          ] }, s) : active ? /* @__PURE__ */ jsxs6(Text8, { bold: true, color: "cyan", children: [
             " ",
             i + 1,
             ". ",
             s
-          ] }, s) : /* @__PURE__ */ jsxs5(Text7, { dimColor: true, children: [
+          ] }, s) : /* @__PURE__ */ jsxs6(Text8, { dimColor: true, children: [
             " ",
             i + 1,
             ". ",
@@ -13014,45 +13653,45 @@ var CardFlow = ({
       ] }),
       step === "intro" && prompt(CARD_FLOW.intro.prompt)
     ] }),
-    step === "fetch-pm" && /* @__PURE__ */ jsx7(Box5, { flexDirection: "column", children: /* @__PURE__ */ jsx7(Text7, { dimColor: true, children: "Fetching payment methods from your Link wallet..." }) }),
-    (step === "pick-pm" || step === "explain-pm") && /* @__PURE__ */ jsxs5(Box5, { flexDirection: "column", children: [
-      step === "pick-pm" && paymentMethods.length > 1 && /* @__PURE__ */ jsxs5(Box5, { flexDirection: "column", children: [
-        /* @__PURE__ */ jsx7(Text7, { children: "Which payment method should we use for the demo?" }),
-        /* @__PURE__ */ jsx7(Box5, { flexDirection: "column", marginTop: 1, children: paymentMethods.map((pm, i) => /* @__PURE__ */ jsx7(Text7, { children: i === selectedPmIndex ? /* @__PURE__ */ jsxs5(Text7, { color: "cyan", bold: true, children: [
+    step === "fetch-pm" && /* @__PURE__ */ jsx9(Box6, { flexDirection: "column", children: /* @__PURE__ */ jsx9(Text8, { dimColor: true, children: "Fetching payment methods from your Link wallet..." }) }),
+    (step === "pick-pm" || step === "explain-pm") && /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", children: [
+      step === "pick-pm" && paymentMethods.length > 1 && /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", children: [
+        /* @__PURE__ */ jsx9(Text8, { children: "Which payment method should we use for the demo?" }),
+        /* @__PURE__ */ jsx9(Box6, { flexDirection: "column", marginTop: 1, children: paymentMethods.map((pm, i) => /* @__PURE__ */ jsx9(Text8, { children: i === selectedPmIndex ? /* @__PURE__ */ jsxs6(Text8, { color: "cyan", bold: true, children: [
           ">",
           " ",
           formatPmLabel(pm),
           pm.is_default ? " (default)" : ""
-        ] }) : /* @__PURE__ */ jsxs5(Text7, { dimColor: true, children: [
+        ] }) : /* @__PURE__ */ jsxs6(Text8, { dimColor: true, children: [
           "  ",
           formatPmLabel(pm),
           pm.is_default ? " (default)" : ""
         ] }) }, pm.id)) }),
-        /* @__PURE__ */ jsx7(Box5, { marginTop: 1, children: /* @__PURE__ */ jsx7(Text7, { dimColor: true, children: "Use \u2191\u2193 to select, [Enter] to confirm" }) })
+        /* @__PURE__ */ jsx9(Box6, { marginTop: 1, children: /* @__PURE__ */ jsx9(Text8, { dimColor: true, children: "Use \u2191\u2193 to select, [Enter] to confirm" }) })
       ] }),
-      paymentMethod && /* @__PURE__ */ jsxs5(Box5, { flexDirection: "column", children: [
-        /* @__PURE__ */ jsxs5(Text7, { color: "green", children: [
+      paymentMethod && /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", children: [
+        /* @__PURE__ */ jsxs6(Text8, { color: "green", children: [
           "\u2713 Using ",
-          /* @__PURE__ */ jsx7(Text7, { bold: true, children: pmLabel }),
+          /* @__PURE__ */ jsx9(Text8, { bold: true, children: pmLabel }),
           paymentMethod.is_default ? " (default)" : ""
         ] }),
         step === "explain-pm" && prompt(CARD_FLOW.explainPm.prompt)
       ] })
     ] }),
-    step === "create-spend" && /* @__PURE__ */ jsxs5(Box5, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsx7(MarkdownText, { children: CARD_FLOW.createSpend.description }),
-      /* @__PURE__ */ jsx7(Box5, { marginY: 1, children: /* @__PURE__ */ jsx7(Text7, { color: "cyan", children: CARD_FLOW.createSpend.loading }) })
+    step === "create-spend" && /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx9(MarkdownText, { children: CARD_FLOW.createSpend.description }),
+      /* @__PURE__ */ jsx9(Box6, { marginY: 1, children: /* @__PURE__ */ jsx9(Text8, { color: "cyan", children: CARD_FLOW.createSpend.loading }) })
     ] }),
-    (step === "await-approval" || step === "approval-timeout") && spendRequest && /* @__PURE__ */ jsxs5(Box5, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsxs5(Text7, { color: "green", children: [
+    (step === "await-approval" || step === "approval-timeout") && spendRequest && /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsxs6(Text8, { color: "green", children: [
         "\u2713 Spend request created (",
         spendRequest.id,
         ")"
       ] }),
-      step === "await-approval" && /* @__PURE__ */ jsxs5(Fragment, { children: [
-        /* @__PURE__ */ jsx7(Text7, { children: CARD_FLOW.approval.description }),
-        /* @__PURE__ */ jsxs5(
-          Box5,
+      step === "await-approval" && /* @__PURE__ */ jsxs6(Fragment, { children: [
+        /* @__PURE__ */ jsx9(Text8, { children: CARD_FLOW.approval.description }),
+        /* @__PURE__ */ jsxs6(
+          Box6,
           {
             flexDirection: "column",
             borderStyle: "round",
@@ -13061,21 +13700,21 @@ var CardFlow = ({
             paddingY: 1,
             marginTop: 1,
             children: [
-              /* @__PURE__ */ jsxs5(Text7, { children: [
+              /* @__PURE__ */ jsxs6(Text8, { children: [
                 "Approve at:",
                 " ",
-                /* @__PURE__ */ jsx7(Text7, { bold: true, color: "cyan", children: approvalUrl })
+                /* @__PURE__ */ jsx9(Text8, { bold: true, color: "cyan", children: approvalUrl })
               ] }),
-              /* @__PURE__ */ jsx7(Text7, { dimColor: true, children: CARD_FLOW.approval.browserHint })
+              /* @__PURE__ */ jsx9(Text8, { dimColor: true, children: CARD_FLOW.approval.browserHint })
             ]
           }
         ),
-        /* @__PURE__ */ jsx7(Box5, { marginY: 1, children: /* @__PURE__ */ jsx7(Text7, { color: "cyan", children: CARD_FLOW.approval.loading }) })
+        /* @__PURE__ */ jsx9(Box6, { marginY: 1, children: /* @__PURE__ */ jsx9(Text8, { color: "cyan", children: CARD_FLOW.approval.loading }) })
       ] }),
-      step === "approval-timeout" && /* @__PURE__ */ jsxs5(Fragment, { children: [
-        /* @__PURE__ */ jsx7(Text7, { color: "yellow", children: "\u26A0 Approval timed out (5 min). Still pending \u2014 you can still approve." }),
-        /* @__PURE__ */ jsxs5(
-          Box5,
+      step === "approval-timeout" && /* @__PURE__ */ jsxs6(Fragment, { children: [
+        /* @__PURE__ */ jsx9(Text8, { color: "yellow", children: "\u26A0 Approval timed out (5 min). Still pending \u2014 you can still approve." }),
+        /* @__PURE__ */ jsxs6(
+          Box6,
           {
             flexDirection: "column",
             borderStyle: "round",
@@ -13084,38 +13723,38 @@ var CardFlow = ({
             paddingY: 1,
             marginTop: 1,
             children: [
-              /* @__PURE__ */ jsxs5(Text7, { children: [
+              /* @__PURE__ */ jsxs6(Text8, { children: [
                 "Approve at:",
                 " ",
-                /* @__PURE__ */ jsx7(Text7, { bold: true, color: "cyan", children: approvalUrl })
+                /* @__PURE__ */ jsx9(Text8, { bold: true, color: "cyan", children: approvalUrl })
               ] }),
-              /* @__PURE__ */ jsx7(Text7, { dimColor: true, children: "Press [Enter] to open in browser" })
+              /* @__PURE__ */ jsx9(Text8, { dimColor: true, children: "Press [Enter] to open in browser" })
             ]
           }
         ),
-        /* @__PURE__ */ jsx7(Box5, { marginTop: 1, children: /* @__PURE__ */ jsx7(Text7, { dimColor: true, children: "r Retry polling q Quit demo" }) })
+        /* @__PURE__ */ jsx9(Box6, { marginTop: 1, children: /* @__PURE__ */ jsx9(Text8, { dimColor: true, children: "r Retry polling q Quit demo" }) })
       ] })
     ] }),
-    (step === "show-card" || step === "open-url" || step === "done") && card && /* @__PURE__ */ jsxs5(Box5, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsx7(Text7, { color: "green", children: "\u2713 Approved!" }),
-      /* @__PURE__ */ jsx7(MarkdownText, { children: CARD_FLOW.showCard.description }),
-      /* @__PURE__ */ jsx7(Box5, { flexDirection: "column", paddingX: 2, marginTop: 1, children: /* @__PURE__ */ jsxs5(Text7, { children: [
-        /* @__PURE__ */ jsx7(Text7, { dimColor: true, children: "Number " }),
-        /* @__PURE__ */ jsx7(Text7, { bold: true, children: formatCardNumber(card.number) }),
+    (step === "show-card" || step === "open-url" || step === "done") && card && /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx9(Text8, { color: "green", children: "\u2713 Approved!" }),
+      /* @__PURE__ */ jsx9(MarkdownText, { children: CARD_FLOW.showCard.description }),
+      /* @__PURE__ */ jsx9(Box6, { flexDirection: "column", paddingX: 2, marginTop: 1, children: /* @__PURE__ */ jsxs6(Text8, { children: [
+        /* @__PURE__ */ jsx9(Text8, { dimColor: true, children: "Number " }),
+        /* @__PURE__ */ jsx9(Text8, { bold: true, children: formatCardNumber(card.number) }),
         "  ",
-        /* @__PURE__ */ jsx7(Text7, { dimColor: true, children: "Exp " }),
-        /* @__PURE__ */ jsx7(Text7, { bold: true, children: formatExpiry(card.exp_month, card.exp_year) }),
+        /* @__PURE__ */ jsx9(Text8, { dimColor: true, children: "Exp " }),
+        /* @__PURE__ */ jsx9(Text8, { bold: true, children: formatExpiry(card.exp_month, card.exp_year) }),
         "  ",
-        /* @__PURE__ */ jsx7(Text7, { dimColor: true, children: "CVC " }),
-        /* @__PURE__ */ jsx7(Text7, { bold: true, children: card.cvc }),
-        card.billing_address?.postal_code && /* @__PURE__ */ jsxs5(Fragment, { children: [
+        /* @__PURE__ */ jsx9(Text8, { dimColor: true, children: "CVC " }),
+        /* @__PURE__ */ jsx9(Text8, { bold: true, children: card.cvc }),
+        card.billing_address?.postal_code && /* @__PURE__ */ jsxs6(Fragment, { children: [
           "  ",
-          /* @__PURE__ */ jsx7(Text7, { dimColor: true, children: "Zip " }),
-          /* @__PURE__ */ jsx7(Text7, { bold: true, children: card.billing_address.postal_code })
+          /* @__PURE__ */ jsx9(Text8, { dimColor: true, children: "Zip " }),
+          /* @__PURE__ */ jsx9(Text8, { bold: true, children: card.billing_address.postal_code })
         ] }),
-        card.valid_until && /* @__PURE__ */ jsxs5(Fragment, { children: [
+        card.valid_until && /* @__PURE__ */ jsxs6(Fragment, { children: [
           "  ",
-          /* @__PURE__ */ jsxs5(Text7, { dimColor: true, children: [
+          /* @__PURE__ */ jsxs6(Text8, { dimColor: true, children: [
             "expires",
             " ",
             new Date(card.valid_until).toLocaleTimeString([], {
@@ -13127,14 +13766,14 @@ var CardFlow = ({
       ] }) }),
       step === "show-card" && prompt(CARD_FLOW.showCard.prompt)
     ] }),
-    step === "done" && /* @__PURE__ */ jsxs5(Box5, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsxs5(Text7, { color: "green", children: [
+    step === "done" && /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsxs6(Text8, { color: "green", children: [
         "\u2713 ",
         CARD_FLOW.done.success
       ] }),
-      /* @__PURE__ */ jsx7(Text7, { children: CARD_FLOW.done.detail })
+      /* @__PURE__ */ jsx9(Text8, { children: CARD_FLOW.done.detail })
     ] }),
-    step === "error" && /* @__PURE__ */ jsxs5(Text7, { color: "red", children: [
+    step === "error" && /* @__PURE__ */ jsxs6(Text8, { color: "red", children: [
       "Error: ",
       error
     ] })
@@ -13142,7 +13781,7 @@ var CardFlow = ({
 };
 
 // src/commands/demo/spt-flow.tsx
-import { Box as Box7, Text as Text9, useInput as useInput3 } from "ink";
+import { Box as Box8, Text as Text10, useInput as useInput3 } from "ink";
 import { useEffect as useEffect6, useRef as useRef3, useState as useState6 } from "react";
 
 // src/commands/mpp/decode.ts
@@ -13224,13 +13863,13 @@ function decodeStripeChallenge(challengeHeader) {
 }
 
 // src/commands/mpp/pay.tsx
-import { Box as Box6, Text as Text8 } from "ink";
-import Spinner3 from "ink-spinner";
+import { Box as Box7, Text as Text9 } from "ink";
+import Spinner4 from "ink-spinner";
 import { Credential, Method } from "mppx";
 import { Mppx, Transport } from "mppx/client";
 import { Methods as StripeMethods } from "mppx/stripe";
 import { useEffect as useEffect5, useState as useState5 } from "react";
-import { jsx as jsx8, jsxs as jsxs6 } from "react/jsx-runtime";
+import { jsx as jsx10, jsxs as jsxs7 } from "react/jsx-runtime";
 function buildHeaders(data, headers) {
   const result = {};
   if (data !== void 0) {
@@ -13404,21 +14043,21 @@ function MppPay({
     done: "Done"
   };
   if (error) {
-    return /* @__PURE__ */ jsxs6(Text8, { color: "red", children: [
+    return /* @__PURE__ */ jsxs7(Text9, { color: "red", children: [
       "Error: ",
       error
     ] });
   }
-  return /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", children: [
-    step !== "done" && /* @__PURE__ */ jsx8(Box6, { children: /* @__PURE__ */ jsxs6(Text8, { color: "cyan", children: [
-      /* @__PURE__ */ jsx8(Spinner3, { type: "dots" }),
+  return /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", children: [
+    step !== "done" && /* @__PURE__ */ jsx10(Box7, { children: /* @__PURE__ */ jsxs7(Text9, { color: "cyan", children: [
+      /* @__PURE__ */ jsx10(Spinner4, { type: "dots" }),
       " ",
       stepLabels[step],
       "..."
     ] }) }),
-    result && /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsxs6(
-        Text8,
+    result && /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsxs7(
+        Text9,
         {
           color: result.status >= 400 ? "red" : result.status >= 300 ? "yellow" : "green",
           children: [
@@ -13427,13 +14066,13 @@ function MppPay({
           ]
         }
       ),
-      /* @__PURE__ */ jsx8(Text8, { children: result.body })
+      /* @__PURE__ */ jsx10(Text9, { children: result.body })
     ] })
   ] });
 }
 
 // src/commands/demo/spt-flow.tsx
-import { Fragment as Fragment2, jsx as jsx9, jsxs as jsxs7 } from "react/jsx-runtime";
+import { Fragment as Fragment2, jsx as jsx11, jsxs as jsxs8 } from "react/jsx-runtime";
 var SptFlow = ({
   spendRequestRepo: spendRequestRepo2,
   paymentMethodsResource,
@@ -13616,26 +14255,26 @@ var SptFlow = ({
     ];
     return order.indexOf(step) > order.indexOf(target);
   };
-  const prompt = (label = "Press [Enter] to continue") => /* @__PURE__ */ jsxs7(Text9, { dimColor: true, children: [
+  const prompt = (label = "Press [Enter] to continue") => /* @__PURE__ */ jsxs8(Text10, { dimColor: true, children: [
     "\n",
     ">",
     " ",
     label
   ] });
-  return /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", gap: 1, children: [
-    /* @__PURE__ */ jsx9(Text9, { bold: true, color: "cyan", children: SPT_FLOW.title }),
-    /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsxs7(Box7, { flexDirection: "row", gap: 1, children: [
-        /* @__PURE__ */ jsx9(Text9, { color: "yellow", children: "[testmode]" }),
-        /* @__PURE__ */ jsxs7(Text9, { dimColor: true, children: [
+  return /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", gap: 1, children: [
+    /* @__PURE__ */ jsx11(Text10, { bold: true, color: "cyan", children: SPT_FLOW.title }),
+    /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsxs8(Box8, { flexDirection: "row", gap: 1, children: [
+        /* @__PURE__ */ jsx11(Text10, { color: "yellow", children: "[testmode]" }),
+        /* @__PURE__ */ jsxs8(Text10, { dimColor: true, children: [
           DEMO_CLIMATE_API_URL,
           "  ",
           DEMO_MPP_DEV_URL
         ] })
       ] }),
-      /* @__PURE__ */ jsx9(MarkdownText, { children: SPT_FLOW.intro.description }),
-      /* @__PURE__ */ jsxs7(Box7, { marginTop: 1, flexDirection: "column", children: [
-        /* @__PURE__ */ jsx9(Text9, { children: SPT_FLOW.intro.preamble }),
+      /* @__PURE__ */ jsx11(MarkdownText, { children: SPT_FLOW.intro.description }),
+      /* @__PURE__ */ jsxs8(Box8, { marginTop: 1, flexDirection: "column", children: [
+        /* @__PURE__ */ jsx11(Text10, { children: SPT_FLOW.intro.preamble }),
         SPT_FLOW.intro.steps.map((s, i) => {
           const doneAfter = [
             "pick-pm",
@@ -13654,17 +14293,17 @@ var SptFlow = ({
           const done = pastStep(doneAfter[i]);
           const active = !done && (step === activeFrom[i] || pastStep(activeFrom[i]));
           const label = s.replace(/`/g, "");
-          return done ? /* @__PURE__ */ jsxs7(Text9, { dimColor: true, strikethrough: true, children: [
+          return done ? /* @__PURE__ */ jsxs8(Text10, { dimColor: true, strikethrough: true, children: [
             " ",
             i + 1,
             ". ",
             label
-          ] }, s) : active ? /* @__PURE__ */ jsxs7(Text9, { bold: true, color: "cyan", children: [
+          ] }, s) : active ? /* @__PURE__ */ jsxs8(Text10, { bold: true, color: "cyan", children: [
             " ",
             i + 1,
             ". ",
             label
-          ] }, s) : /* @__PURE__ */ jsxs7(Text9, { dimColor: true, children: [
+          ] }, s) : /* @__PURE__ */ jsxs8(Text10, { dimColor: true, children: [
             " ",
             i + 1,
             ". ",
@@ -13674,47 +14313,47 @@ var SptFlow = ({
       ] }),
       step === "intro" && prompt(SPT_FLOW.intro.prompt)
     ] }),
-    step === "fetch-pm" && /* @__PURE__ */ jsx9(Box7, { marginY: 1, children: /* @__PURE__ */ jsx9(Text9, { color: "cyan", children: "Fetching payment methods..." }) }),
-    step === "pick-pm" && paymentMethods.length > 1 && /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsx9(Text9, { children: "Which payment method should we use for the demo?" }),
-      /* @__PURE__ */ jsx9(Box7, { flexDirection: "column", marginTop: 1, children: paymentMethods.map((pm, i) => /* @__PURE__ */ jsx9(Text9, { children: i === selectedPmIndex ? /* @__PURE__ */ jsxs7(Text9, { color: "cyan", bold: true, children: [
+    step === "fetch-pm" && /* @__PURE__ */ jsx11(Box8, { marginY: 1, children: /* @__PURE__ */ jsx11(Text10, { color: "cyan", children: "Fetching payment methods..." }) }),
+    step === "pick-pm" && paymentMethods.length > 1 && /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx11(Text10, { children: "Which payment method should we use for the demo?" }),
+      /* @__PURE__ */ jsx11(Box8, { flexDirection: "column", marginTop: 1, children: paymentMethods.map((pm, i) => /* @__PURE__ */ jsx11(Text10, { children: i === selectedPmIndex ? /* @__PURE__ */ jsxs8(Text10, { color: "cyan", bold: true, children: [
         ">",
         " ",
         pm.card_details ? `${pm.card_details.brand} ****${pm.card_details.last4}` : pm.type,
         pm.is_default ? " (default)" : ""
-      ] }) : /* @__PURE__ */ jsxs7(Text9, { dimColor: true, children: [
+      ] }) : /* @__PURE__ */ jsxs8(Text10, { dimColor: true, children: [
         "  ",
         pm.card_details ? `${pm.card_details.brand} ****${pm.card_details.last4}` : pm.type,
         pm.is_default ? " (default)" : ""
       ] }) }, pm.id)) }),
-      /* @__PURE__ */ jsx9(Box7, { marginTop: 1, children: /* @__PURE__ */ jsx9(Text9, { dimColor: true, children: "Use \u2191\u2193 to select, [Enter] to confirm" }) })
+      /* @__PURE__ */ jsx11(Box8, { marginTop: 1, children: /* @__PURE__ */ jsx11(Text10, { dimColor: true, children: "Use \u2191\u2193 to select, [Enter] to confirm" }) })
     ] }),
-    (step === "probe" || step === "explain-402") && /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsx9(MarkdownText, { children: SPT_FLOW.probe.description }),
-      step === "probe" && /* @__PURE__ */ jsx9(Box7, { marginY: 1, children: /* @__PURE__ */ jsx9(Text9, { color: "cyan", children: SPT_FLOW.probe.loading }) }),
-      step === "explain-402" && networkId && /* @__PURE__ */ jsxs7(Fragment2, { children: [
-        /* @__PURE__ */ jsx9(MarkdownText, { children: SPT_FLOW.probe.detail }),
-        /* @__PURE__ */ jsxs7(Text9, { color: "green", children: [
+    (step === "probe" || step === "explain-402") && /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx11(MarkdownText, { children: SPT_FLOW.probe.description }),
+      step === "probe" && /* @__PURE__ */ jsx11(Box8, { marginY: 1, children: /* @__PURE__ */ jsx11(Text10, { color: "cyan", children: SPT_FLOW.probe.loading }) }),
+      step === "explain-402" && networkId && /* @__PURE__ */ jsxs8(Fragment2, { children: [
+        /* @__PURE__ */ jsx11(MarkdownText, { children: SPT_FLOW.probe.detail }),
+        /* @__PURE__ */ jsxs8(Text10, { color: "green", children: [
           "\u2713 Got HTTP 402 \u2014 network_id: ",
-          /* @__PURE__ */ jsx9(Text9, { bold: true, children: networkId })
+          /* @__PURE__ */ jsx11(Text10, { bold: true, children: networkId })
         ] }),
         prompt(SPT_FLOW.probe.prompt)
       ] })
     ] }),
-    step === "create-spend" && /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsx9(MarkdownText, { children: SPT_FLOW.createSpend.description }),
-      /* @__PURE__ */ jsx9(Box7, { marginY: 1, children: /* @__PURE__ */ jsx9(Text9, { color: "cyan", children: SPT_FLOW.createSpend.loading }) })
+    step === "create-spend" && /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx11(MarkdownText, { children: SPT_FLOW.createSpend.description }),
+      /* @__PURE__ */ jsx11(Box8, { marginY: 1, children: /* @__PURE__ */ jsx11(Text10, { color: "cyan", children: SPT_FLOW.createSpend.loading }) })
     ] }),
-    (step === "await-approval" || step === "approval-timeout") && spendRequest && /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsxs7(Text9, { color: "green", children: [
+    (step === "await-approval" || step === "approval-timeout") && spendRequest && /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsxs8(Text10, { color: "green", children: [
         "\u2713 Spend request created (",
         spendRequest.id,
         ")"
       ] }),
-      step === "await-approval" && /* @__PURE__ */ jsxs7(Fragment2, { children: [
-        /* @__PURE__ */ jsx9(Text9, { children: SPT_FLOW.approval.description }),
-        /* @__PURE__ */ jsxs7(
-          Box7,
+      step === "await-approval" && /* @__PURE__ */ jsxs8(Fragment2, { children: [
+        /* @__PURE__ */ jsx11(Text10, { children: SPT_FLOW.approval.description }),
+        /* @__PURE__ */ jsxs8(
+          Box8,
           {
             flexDirection: "column",
             borderStyle: "round",
@@ -13723,21 +14362,21 @@ var SptFlow = ({
             paddingY: 1,
             marginTop: 1,
             children: [
-              /* @__PURE__ */ jsxs7(Text9, { children: [
+              /* @__PURE__ */ jsxs8(Text10, { children: [
                 "Approve at:",
                 " ",
-                /* @__PURE__ */ jsx9(Text9, { bold: true, color: "cyan", children: approvalUrl })
+                /* @__PURE__ */ jsx11(Text10, { bold: true, color: "cyan", children: approvalUrl })
               ] }),
-              /* @__PURE__ */ jsx9(Text9, { dimColor: true, children: SPT_FLOW.approval.browserHint })
+              /* @__PURE__ */ jsx11(Text10, { dimColor: true, children: SPT_FLOW.approval.browserHint })
             ]
           }
         ),
-        /* @__PURE__ */ jsx9(Box7, { marginY: 1, children: /* @__PURE__ */ jsx9(Text9, { color: "cyan", children: SPT_FLOW.approval.loading }) })
+        /* @__PURE__ */ jsx11(Box8, { marginY: 1, children: /* @__PURE__ */ jsx11(Text10, { color: "cyan", children: SPT_FLOW.approval.loading }) })
       ] }),
-      step === "approval-timeout" && /* @__PURE__ */ jsxs7(Fragment2, { children: [
-        /* @__PURE__ */ jsx9(Text9, { color: "yellow", children: "\u26A0 Approval timed out (5 min). Still pending \u2014 you can still approve." }),
-        /* @__PURE__ */ jsxs7(
-          Box7,
+      step === "approval-timeout" && /* @__PURE__ */ jsxs8(Fragment2, { children: [
+        /* @__PURE__ */ jsx11(Text10, { color: "yellow", children: "\u26A0 Approval timed out (5 min). Still pending \u2014 you can still approve." }),
+        /* @__PURE__ */ jsxs8(
+          Box8,
           {
             flexDirection: "column",
             borderStyle: "round",
@@ -13746,35 +14385,35 @@ var SptFlow = ({
             paddingY: 1,
             marginTop: 1,
             children: [
-              /* @__PURE__ */ jsxs7(Text9, { children: [
+              /* @__PURE__ */ jsxs8(Text10, { children: [
                 "Approve at:",
                 " ",
-                /* @__PURE__ */ jsx9(Text9, { bold: true, color: "cyan", children: approvalUrl })
+                /* @__PURE__ */ jsx11(Text10, { bold: true, color: "cyan", children: approvalUrl })
               ] }),
-              /* @__PURE__ */ jsx9(Text9, { dimColor: true, children: "Press [Enter] to open in browser" })
+              /* @__PURE__ */ jsx11(Text10, { dimColor: true, children: "Press [Enter] to open in browser" })
             ]
           }
         ),
-        /* @__PURE__ */ jsx9(Box7, { marginTop: 1, children: /* @__PURE__ */ jsx9(Text9, { dimColor: true, children: "r Retry polling q Quit demo" }) })
+        /* @__PURE__ */ jsx11(Box8, { marginTop: 1, children: /* @__PURE__ */ jsx11(Text10, { dimColor: true, children: "r Retry polling q Quit demo" }) })
       ] })
     ] }),
-    (step === "mpp-pay-gate" || step === "mpp-pay") && /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsx9(Text9, { color: "green", children: "\u2713 Approved!" }),
-      /* @__PURE__ */ jsx9(MarkdownText, { children: SPT_FLOW.mppPay.description }),
+    (step === "mpp-pay-gate" || step === "mpp-pay") && /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx11(Text10, { color: "green", children: "\u2713 Approved!" }),
+      /* @__PURE__ */ jsx11(MarkdownText, { children: SPT_FLOW.mppPay.description }),
       step === "mpp-pay-gate" && prompt(SPT_FLOW.mppPay.prompt),
-      step === "mpp-pay" && /* @__PURE__ */ jsx9(Box7, { marginY: 1, children: /* @__PURE__ */ jsx9(Text9, { color: "cyan", children: SPT_FLOW.mppPay.loading }) })
+      step === "mpp-pay" && /* @__PURE__ */ jsx11(Box8, { marginY: 1, children: /* @__PURE__ */ jsx11(Text10, { color: "cyan", children: SPT_FLOW.mppPay.loading }) })
     ] }),
-    step === "done" && payResult && /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsxs7(Text9, { bold: true, color: "green", children: [
+    step === "done" && payResult && /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsxs8(Text10, { bold: true, color: "green", children: [
         "\u2713 ",
         SPT_FLOW.done.success,
         " (HTTP ",
         payResult.status,
         ")"
       ] }),
-      /* @__PURE__ */ jsx9(MarkdownText, { children: SPT_FLOW.done.detail })
+      /* @__PURE__ */ jsx11(MarkdownText, { children: SPT_FLOW.done.detail })
     ] }),
-    step === "error" && /* @__PURE__ */ jsxs7(Text9, { color: "red", children: [
+    step === "error" && /* @__PURE__ */ jsxs8(Text10, { color: "red", children: [
       "Error: ",
       error
     ] })
@@ -13782,7 +14421,7 @@ var SptFlow = ({
 };
 
 // src/commands/demo/demo-runner.tsx
-import { Fragment as Fragment3, jsx as jsx10, jsxs as jsxs8 } from "react/jsx-runtime";
+import { Fragment as Fragment3, jsx as jsx12, jsxs as jsxs9 } from "react/jsx-runtime";
 var DemoRunner = ({
   authRepo: authRepo2,
   spendRequestRepo: spendRequestRepo2,
@@ -13824,7 +14463,7 @@ var DemoRunner = ({
       setPhase("spt-flow");
     }
   });
-  const onCardComplete = useCallback2(
+  const onCardComplete = useCallback3(
     (result) => {
       setPaymentMethodId(result.paymentMethodId);
       setCardSuccess(result.success);
@@ -13840,7 +14479,7 @@ var DemoRunner = ({
     },
     [runSpt, onComplete, exit]
   );
-  const onSptComplete = useCallback2(
+  const onSptComplete = useCallback3(
     (success) => {
       setSptSuccess(success);
       setPhase("summary");
@@ -13851,12 +14490,12 @@ var DemoRunner = ({
     },
     [onComplete, exit]
   );
-  return /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", gap: 1, children: [
-    /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsx10(Text10, { bold: true, children: DEMO_MENU.title }),
-      /* @__PURE__ */ jsx10(Text10, { children: DEMO_MENU.subtitle })
+  return /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", gap: 1, children: [
+    /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx12(Text11, { bold: true, children: DEMO_MENU.title }),
+      /* @__PURE__ */ jsx12(Text11, { children: DEMO_MENU.subtitle })
     ] }),
-    phase === "auth" && /* @__PURE__ */ jsx10(
+    phase === "auth" && /* @__PURE__ */ jsx12(
       Login,
       {
         authResource: authRepo2,
@@ -13865,25 +14504,25 @@ var DemoRunner = ({
         onComplete: () => setPhase(postAuthPhase)
       }
     ),
-    phase === "menu" && /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsx10(Text10, { children: DEMO_MENU.question }),
-      /* @__PURE__ */ jsx10(Box8, { flexDirection: "column", marginTop: 1, gap: 1, children: DEMO_MENU.options.map((opt, i) => /* @__PURE__ */ jsx10(Box8, { flexDirection: "column", children: i === menuIndex ? /* @__PURE__ */ jsxs8(Fragment3, { children: [
-        /* @__PURE__ */ jsxs8(Text10, { color: "cyan", bold: true, children: [
+    phase === "menu" && /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx12(Text11, { children: DEMO_MENU.question }),
+      /* @__PURE__ */ jsx12(Box9, { flexDirection: "column", marginTop: 1, gap: 1, children: DEMO_MENU.options.map((opt, i) => /* @__PURE__ */ jsx12(Box9, { flexDirection: "column", children: i === menuIndex ? /* @__PURE__ */ jsxs9(Fragment3, { children: [
+        /* @__PURE__ */ jsxs9(Text11, { color: "cyan", bold: true, children: [
           ">",
           " ",
           opt.label
         ] }),
-        /* @__PURE__ */ jsxs8(Text10, { color: "cyan", children: [
+        /* @__PURE__ */ jsxs9(Text11, { color: "cyan", children: [
           "  ",
           opt.description
         ] })
-      ] }) : /* @__PURE__ */ jsxs8(Text10, { dimColor: true, children: [
+      ] }) : /* @__PURE__ */ jsxs9(Text11, { dimColor: true, children: [
         "  ",
         opt.label
       ] }) }, opt.key)) }),
-      /* @__PURE__ */ jsx10(Box8, { marginTop: 1, children: /* @__PURE__ */ jsx10(Text10, { dimColor: true, children: DEMO_MENU.hint }) })
+      /* @__PURE__ */ jsx12(Box9, { marginTop: 1, children: /* @__PURE__ */ jsx12(Text11, { dimColor: true, children: DEMO_MENU.hint }) })
     ] }),
-    runCard && phase !== "menu" && /* @__PURE__ */ jsx10(
+    runCard && phase !== "menu" && /* @__PURE__ */ jsx12(
       CardFlow,
       {
         spendRequestRepo: spendRequestRepo2,
@@ -13892,19 +14531,19 @@ var DemoRunner = ({
         onComplete: onCardComplete
       }
     ),
-    phase === "card-done" && /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsx10(Text10, { dimColor: true, children: "\u2500\u2500\u2500" }),
-      /* @__PURE__ */ jsx10(MarkdownText, { children: DEMO_MENU.transition }),
-      /* @__PURE__ */ jsxs8(Text10, { dimColor: true, children: [
+    phase === "card-done" && /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx12(Text11, { dimColor: true, children: "\u2500\u2500\u2500" }),
+      /* @__PURE__ */ jsx12(MarkdownText, { children: DEMO_MENU.transition }),
+      /* @__PURE__ */ jsxs9(Text11, { dimColor: true, children: [
         "\n",
         ">",
         " ",
         DEMO_MENU.transitionPrompt
       ] })
     ] }),
-    runSpt && (phase === "spt-flow" || phase === "summary") && /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", children: [
-      runCard && /* @__PURE__ */ jsx10(Text10, { dimColor: true, children: "\u2500\u2500\u2500" }),
-      /* @__PURE__ */ jsx10(
+    runSpt && (phase === "spt-flow" || phase === "summary") && /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", children: [
+      runCard && /* @__PURE__ */ jsx12(Text11, { dimColor: true, children: "\u2500\u2500\u2500" }),
+      /* @__PURE__ */ jsx12(
         SptFlow,
         {
           spendRequestRepo: spendRequestRepo2,
@@ -13914,30 +14553,30 @@ var DemoRunner = ({
         }
       )
     ] }),
-    phase === "summary" && /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsx10(Text10, { dimColor: true, children: "\u2500\u2500\u2500" }),
-      /* @__PURE__ */ jsx10(Text10, { bold: true, children: "Done!" }),
-      cardSuccess !== null && /* @__PURE__ */ jsxs8(Text10, { color: cardSuccess ? "green" : "red", children: [
+    phase === "summary" && /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx12(Text11, { dimColor: true, children: "\u2500\u2500\u2500" }),
+      /* @__PURE__ */ jsx12(Text11, { bold: true, children: "Done!" }),
+      cardSuccess !== null && /* @__PURE__ */ jsxs9(Text11, { color: cardSuccess ? "green" : "red", children: [
         cardSuccess ? "\u2713" : "\u2717",
         " Virtual card flow"
       ] }),
-      sptSuccess !== null && /* @__PURE__ */ jsxs8(Text10, { color: sptSuccess ? "green" : "red", children: [
+      sptSuccess !== null && /* @__PURE__ */ jsxs9(Text11, { color: sptSuccess ? "green" : "red", children: [
         sptSuccess ? "\u2713" : "\u2717",
         " Machine payment flow"
       ] }),
-      /* @__PURE__ */ jsx10(AppDownloadQrCodes, {})
+      /* @__PURE__ */ jsx12(AppDownloadQrCodes, {})
     ] })
   ] });
 };
 
 // src/commands/demo/index.tsx
-import { jsx as jsx11 } from "react/jsx-runtime";
-var demoOptions = z2.object({
-  onlyCard: z2.boolean().default(false).describe("Run only the virtual card flow"),
-  onlySpt: z2.boolean().default(false).describe("Run only the machine payment (SPT) flow")
+import { jsx as jsx13 } from "react/jsx-runtime";
+var demoOptions = z3.object({
+  onlyCard: z3.boolean().default(false).describe("Run only the virtual card flow"),
+  onlySpt: z3.boolean().default(false).describe("Run only the machine payment (SPT) flow")
 });
 function createDemoCli(authRepo2, spendRequestRepo2, createPaymentMethodsResource, authStorage2) {
-  return Cli2.create("demo", {
+  return Cli3.create("demo", {
     description: "Run an interactive demo of both Link payment flows (virtual card + machine payment)",
     options: demoOptions,
     outputPolicy: "agent-only",
@@ -13950,7 +14589,7 @@ function createDemoCli(authRepo2, spendRequestRepo2, createPaymentMethodsResourc
       }
       const paymentMethodsResource = createPaymentMethodsResource();
       return renderInteractive(
-        /* @__PURE__ */ jsx11(
+        /* @__PURE__ */ jsx13(
           DemoRunner,
           {
             authRepo: authRepo2,
@@ -13970,85 +14609,61 @@ function createDemoCli(authRepo2, spendRequestRepo2, createPaymentMethodsResourc
 }
 
 // src/commands/mpp/index.tsx
-import { Cli as Cli3, z as z4 } from "incur";
-
-// src/utils/require-auth.ts
-var NOT_AUTHENTICATED_ERROR = {
-  code: "NOT_AUTHENTICATED",
-  message: 'Not authenticated. Run "link-cli auth login" first.',
-  cta: {
-    commands: [{ command: "auth login", description: "Log in to Link" }]
-  }
-};
-function requireAuth(authStorage2, envAccessToken2) {
-  const store = authStorage2 ?? storage;
-  return (c, next) => {
-    if (!envAccessToken2 && !store.isAuthenticated()) {
-      return c.error(NOT_AUTHENTICATED_ERROR);
-    }
-    return next();
-  };
-}
-function requireAuthGuard(c, authStorage2, envAccessToken2) {
-  const store = authStorage2 ?? storage;
-  if (!envAccessToken2 && !store.isAuthenticated()) {
-    c.error(NOT_AUTHENTICATED_ERROR);
-  }
-}
+import { Cli as Cli4, z as z5 } from "incur";
 
 // src/commands/mpp/decode-view.tsx
-import { Box as Box9, Text as Text11 } from "ink";
-import { jsx as jsx12, jsxs as jsxs9 } from "react/jsx-runtime";
+import { Box as Box10, Text as Text12 } from "ink";
+import { jsx as jsx14, jsxs as jsxs10 } from "react/jsx-runtime";
 function DecodeChallengeView({
   decoded
 }) {
-  return /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsx12(Text11, { color: "green", children: "\u2713 Stripe challenge decoded" }),
-    /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", marginTop: 1, paddingX: 2, children: [
-      /* @__PURE__ */ jsxs9(Text11, { children: [
+  return /* @__PURE__ */ jsxs10(Box10, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx14(Text12, { color: "green", children: "\u2713 Stripe challenge decoded" }),
+    /* @__PURE__ */ jsxs10(Box10, { flexDirection: "column", marginTop: 1, paddingX: 2, children: [
+      /* @__PURE__ */ jsxs10(Text12, { children: [
         "ID: ",
-        /* @__PURE__ */ jsx12(Text11, { bold: true, children: decoded.id })
+        /* @__PURE__ */ jsx14(Text12, { bold: true, children: decoded.id })
       ] }),
-      /* @__PURE__ */ jsxs9(Text11, { children: [
+      /* @__PURE__ */ jsxs10(Text12, { children: [
         "Realm: ",
-        /* @__PURE__ */ jsx12(Text11, { bold: true, children: decoded.realm })
+        /* @__PURE__ */ jsx14(Text12, { bold: true, children: decoded.realm })
       ] }),
-      /* @__PURE__ */ jsxs9(Text11, { children: [
+      /* @__PURE__ */ jsxs10(Text12, { children: [
         "Network ID: ",
-        /* @__PURE__ */ jsx12(Text11, { bold: true, children: decoded.network_id })
+        /* @__PURE__ */ jsx14(Text12, { bold: true, children: decoded.network_id })
       ] }),
-      /* @__PURE__ */ jsx12(Text11, { children: "Request JSON:" }),
-      /* @__PURE__ */ jsx12(Text11, { children: JSON.stringify(decoded.request_json, null, 2) })
+      /* @__PURE__ */ jsx14(Text12, { children: "Request JSON:" }),
+      /* @__PURE__ */ jsx14(Text12, { children: JSON.stringify(decoded.request_json, null, 2) })
     ] })
   ] });
 }
 
 // src/commands/mpp/schema.ts
-import { z as z3 } from "incur";
-var payOptions = z3.object({
-  spendRequestId: z3.string().describe(
+import { z as z4 } from "incur";
+var payOptions = z4.object({
+  spendRequestId: z4.string().describe(
     'Approved spend request ID with credential_type "shared_payment_token"'
   ),
-  method: z3.string().optional().describe("HTTP method (default: GET, or POST if --data is provided)"),
-  data: z3.string().optional().describe("Request body (implies POST if --method is not set)"),
-  header: z3.array(z3.string()).default([]).describe('Request header in "Name: Value" format (repeatable)')
+  method: z4.string().optional().describe("HTTP method (default: GET, or POST if --data is provided)"),
+  data: z4.string().optional().describe("Request body (implies POST if --method is not set)"),
+  header: z4.array(z4.string()).default([]).describe('Request header in "Name: Value" format (repeatable)')
 });
-var decodeOptions = z3.object({
-  challenge: z3.string().describe(
+var decodeOptions = z4.object({
+  challenge: z4.string().describe(
     "Raw WWW-Authenticate header value; may include multiple payment challenges"
   )
 });
 
 // src/commands/mpp/index.tsx
-import { jsx as jsx13 } from "react/jsx-runtime";
+import { jsx as jsx15 } from "react/jsx-runtime";
 function createMppCli(repository, authStorage2, envAccessToken2) {
-  const cli2 = Cli3.create("mpp", {
+  const cli2 = Cli4.create("mpp", {
     description: "Machine payment protocol (MPP) commands"
   });
   cli2.command("pay", {
     description: "Complete a machine payment protocol (MPP) payment using an approved spend request",
-    args: z4.object({
-      url: z4.string().describe("URL to pay")
+    args: z5.object({
+      url: z5.string().describe("URL to pay")
     }),
     options: payOptions,
     alias: { method: "X", data: "d", header: "H" },
@@ -14063,7 +14678,7 @@ function createMppCli(repository, authStorage2, envAccessToken2) {
       if (!c.agent && !c.formatExplicit) {
         let capturedResult = null;
         return renderInteractive(
-          /* @__PURE__ */ jsx13(
+          /* @__PURE__ */ jsx15(
             MppPay,
             {
               url,
@@ -14102,7 +14717,7 @@ function createMppCli(repository, authStorage2, envAccessToken2) {
       const decoded = decodeStripeChallenge(c.options.challenge);
       if (!c.agent && !c.formatExplicit) {
         return renderInteractive(
-          /* @__PURE__ */ jsx13(DecodeChallengeView, { decoded }),
+          /* @__PURE__ */ jsx15(DecodeChallengeView, { decoded }),
           () => decoded
         );
       }
@@ -14113,12 +14728,12 @@ function createMppCli(repository, authStorage2, envAccessToken2) {
 }
 
 // src/commands/onboard/index.tsx
-import { Cli as Cli4 } from "incur";
+import { Cli as Cli5 } from "incur";
 
 // src/commands/onboard/onboard-runner.tsx
-import { Box as Box10, Text as Text12, useApp as useApp2, useInput as useInput5 } from "ink";
+import { Box as Box11, Text as Text13, useApp as useApp2, useInput as useInput5 } from "ink";
 import { useEffect as useEffect7, useRef as useRef4, useState as useState8 } from "react";
-import { jsx as jsx14, jsxs as jsxs10 } from "react/jsx-runtime";
+import { jsx as jsx16, jsxs as jsxs11 } from "react/jsx-runtime";
 var OnboardRunner = ({
   authRepo: authRepo2,
   spendRequestRepo: spendRequestRepo2,
@@ -14184,21 +14799,21 @@ var OnboardRunner = ({
     const order = ["welcome", "auth", "payment-methods", "demo"];
     return order.indexOf(phase) > order.indexOf(target);
   };
-  const prompt = (label = "Press [Enter] to continue") => /* @__PURE__ */ jsxs10(Text12, { dimColor: true, children: [
+  const prompt = (label = "Press [Enter] to continue") => /* @__PURE__ */ jsxs11(Text13, { dimColor: true, children: [
     "\n",
     ">",
     " ",
     label
   ] });
-  return /* @__PURE__ */ jsxs10(Box10, { flexDirection: "column", gap: 1, children: [
-    /* @__PURE__ */ jsxs10(Box10, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsx14(Text12, { bold: true, children: ONBOARD.title }),
-      /* @__PURE__ */ jsx14(Text12, { children: ONBOARD.subtitle })
+  return /* @__PURE__ */ jsxs11(Box11, { flexDirection: "column", gap: 1, children: [
+    /* @__PURE__ */ jsxs11(Box11, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx16(Text13, { bold: true, children: ONBOARD.title }),
+      /* @__PURE__ */ jsx16(Text13, { children: ONBOARD.subtitle })
     ] }),
-    /* @__PURE__ */ jsx14(Box10, { flexDirection: "column", children: authSkipped || pastPhase("auth") ? /* @__PURE__ */ jsxs10(Text12, { color: "green", children: [
+    /* @__PURE__ */ jsx16(Box11, { flexDirection: "column", children: authSkipped || pastPhase("auth") ? /* @__PURE__ */ jsxs11(Text13, { color: "green", children: [
       "\u2713 ",
       authSkipped ? ONBOARD.auth.alreadyLoggedIn : ONBOARD.auth.authenticated
-    ] }) : phase === "auth" && !storage2.isAuthenticated() ? /* @__PURE__ */ jsx14(
+    ] }) : phase === "auth" && !storage2.isAuthenticated() ? /* @__PURE__ */ jsx16(
       Login,
       {
         authResource: authRepo2,
@@ -14207,24 +14822,24 @@ var OnboardRunner = ({
         onComplete: () => authResolver.current?.()
       }
     ) : null }),
-    pastPhase("auth") && /* @__PURE__ */ jsxs10(Box10, { flexDirection: "column", children: [
-      phase === "payment-methods" && !pmMissing && /* @__PURE__ */ jsx14(Text12, { color: "cyan", children: ONBOARD.paymentMethods.loading }),
-      pmMissing && /* @__PURE__ */ jsxs10(Box10, { flexDirection: "column", children: [
-        /* @__PURE__ */ jsx14(Text12, { color: "yellow", children: ONBOARD.paymentMethods.missing }),
-        /* @__PURE__ */ jsx14(Box10, { marginTop: 1, children: /* @__PURE__ */ jsxs10(Text12, { children: [
+    pastPhase("auth") && /* @__PURE__ */ jsxs11(Box11, { flexDirection: "column", children: [
+      phase === "payment-methods" && !pmMissing && /* @__PURE__ */ jsx16(Text13, { color: "cyan", children: ONBOARD.paymentMethods.loading }),
+      pmMissing && /* @__PURE__ */ jsxs11(Box11, { flexDirection: "column", children: [
+        /* @__PURE__ */ jsx16(Text13, { color: "yellow", children: ONBOARD.paymentMethods.missing }),
+        /* @__PURE__ */ jsx16(Box11, { marginTop: 1, children: /* @__PURE__ */ jsxs11(Text13, { children: [
           "Visit",
           " ",
-          /* @__PURE__ */ jsx14(Text12, { bold: true, color: "cyan", children: "app.link.com/wallet" }),
+          /* @__PURE__ */ jsx16(Text13, { bold: true, color: "cyan", children: "app.link.com/wallet" }),
           " ",
           "to add a payment method, then press [Enter] to continue."
         ] }) }),
         prompt(ONBOARD.paymentMethods.retryPrompt)
       ] }),
-      pastPhase("payment-methods") && /* @__PURE__ */ jsx14(Text12, { color: "green", children: "\u2713 Payment method found" })
+      pastPhase("payment-methods") && /* @__PURE__ */ jsx16(Text13, { color: "green", children: "\u2713 Payment method found" })
     ] }),
-    phase === "demo" && /* @__PURE__ */ jsxs10(Box10, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsx14(Text12, { dimColor: true, children: "\u2500\u2500\u2500" }),
-      /* @__PURE__ */ jsx14(
+    phase === "demo" && /* @__PURE__ */ jsxs11(Box11, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx16(Text13, { dimColor: true, children: "\u2500\u2500\u2500" }),
+      /* @__PURE__ */ jsx16(
         DemoRunner,
         {
           authRepo: authRepo2,
@@ -14235,7 +14850,7 @@ var OnboardRunner = ({
         }
       )
     ] }),
-    error && /* @__PURE__ */ jsxs10(Text12, { color: "red", children: [
+    error && /* @__PURE__ */ jsxs11(Text13, { color: "red", children: [
       "Error: ",
       error
     ] })
@@ -14243,9 +14858,9 @@ var OnboardRunner = ({
 };
 
 // src/commands/onboard/index.tsx
-import { jsx as jsx15 } from "react/jsx-runtime";
+import { jsx as jsx17 } from "react/jsx-runtime";
 function createOnboardCli(authRepo2, spendRequestRepo2, createPaymentMethodsResource, authStorage2) {
-  return Cli4.create("onboard", {
+  return Cli5.create("onboard", {
     description: "Guided setup: authenticate, verify payment methods, and demo both payment flows",
     outputPolicy: "agent-only",
     async run(c) {
@@ -14257,7 +14872,7 @@ function createOnboardCli(authRepo2, spendRequestRepo2, createPaymentMethodsReso
       }
       const paymentMethodsResource = createPaymentMethodsResource();
       return renderInteractive(
-        /* @__PURE__ */ jsx15(
+        /* @__PURE__ */ jsx17(
           OnboardRunner,
           {
             authRepo: authRepo2,
@@ -14275,11 +14890,11 @@ function createOnboardCli(authRepo2, spendRequestRepo2, createPaymentMethodsReso
 }
 
 // src/commands/payment-methods/index.tsx
-import { Cli as Cli5 } from "incur";
+import { Cli as Cli6 } from "incur";
 
 // src/commands/payment-methods/add.tsx
-import { Box as Box11, Text as Text13, useApp as useApp3, useInput as useInput6 } from "ink";
-import { jsx as jsx16, jsxs as jsxs11 } from "react/jsx-runtime";
+import { Box as Box12, Text as Text14, useApp as useApp3, useInput as useInput6 } from "ink";
+import { jsx as jsx18, jsxs as jsxs12 } from "react/jsx-runtime";
 var WALLET_URL = "https://app.link.com/wallet";
 var AddPaymentMethod = () => {
   const { exit } = useApp3();
@@ -14289,10 +14904,10 @@ var AddPaymentMethod = () => {
       exit();
     }
   });
-  return /* @__PURE__ */ jsxs11(Box11, { flexDirection: "column", paddingY: 1, children: [
-    /* @__PURE__ */ jsx16(Box11, { marginBottom: 1, children: /* @__PURE__ */ jsx16(Text13, { bold: true, children: "Add Payment Method" }) }),
-    /* @__PURE__ */ jsxs11(
-      Box11,
+  return /* @__PURE__ */ jsxs12(Box12, { flexDirection: "column", paddingY: 1, children: [
+    /* @__PURE__ */ jsx18(Box12, { marginBottom: 1, children: /* @__PURE__ */ jsx18(Text14, { bold: true, children: "Add Payment Method" }) }),
+    /* @__PURE__ */ jsxs12(
+      Box12,
       {
         flexDirection: "column",
         borderStyle: "round",
@@ -14300,12 +14915,12 @@ var AddPaymentMethod = () => {
         paddingX: 2,
         paddingY: 1,
         children: [
-          /* @__PURE__ */ jsxs11(Text13, { children: [
+          /* @__PURE__ */ jsxs12(Text14, { children: [
             "Open:",
             " ",
-            /* @__PURE__ */ jsx16(Text13, { bold: true, color: "cyan", children: WALLET_URL })
+            /* @__PURE__ */ jsx18(Text14, { bold: true, color: "cyan", children: WALLET_URL })
           ] }),
-          /* @__PURE__ */ jsx16(Text13, { dimColor: true, children: "Press Enter to open in browser" })
+          /* @__PURE__ */ jsx18(Text14, { dimColor: true, children: "Press Enter to open in browser" })
         ]
       }
     )
@@ -14313,48 +14928,48 @@ var AddPaymentMethod = () => {
 };
 
 // src/commands/payment-methods/list.tsx
-import { Box as Box12, Text as Text14 } from "ink";
-import Spinner4 from "ink-spinner";
-import { useCallback as useCallback3 } from "react";
-import { jsx as jsx17, jsxs as jsxs12 } from "react/jsx-runtime";
+import { Box as Box13, Text as Text15 } from "ink";
+import Spinner5 from "ink-spinner";
+import { useCallback as useCallback4 } from "react";
+import { jsx as jsx19, jsxs as jsxs13 } from "react/jsx-runtime";
 var PaymentMethodsList = ({
   resource,
   onComplete
 }) => {
-  const action = useCallback3(() => resource.listPaymentMethods(), [resource]);
+  const action = useCallback4(() => resource.listPaymentMethods(), [resource]);
   const { status, data: methods, error } = useAsyncAction(action, onComplete);
   if (status === "loading") {
-    return /* @__PURE__ */ jsx17(Box12, { children: /* @__PURE__ */ jsxs12(Text14, { color: "cyan", children: [
-      /* @__PURE__ */ jsx17(Spinner4, { type: "dots" }),
+    return /* @__PURE__ */ jsx19(Box13, { children: /* @__PURE__ */ jsxs13(Text15, { color: "cyan", children: [
+      /* @__PURE__ */ jsx19(Spinner5, { type: "dots" }),
       " Loading payment methods..."
     ] }) });
   }
   if (status === "error") {
-    return /* @__PURE__ */ jsxs12(Box12, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsx17(Text14, { color: "red", children: "\u2717 Failed to load payment methods" }),
-      /* @__PURE__ */ jsx17(Text14, { color: "red", children: error })
+    return /* @__PURE__ */ jsxs13(Box13, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx19(Text15, { color: "red", children: "\u2717 Failed to load payment methods" }),
+      /* @__PURE__ */ jsx19(Text15, { color: "red", children: error })
     ] });
   }
   if (!methods || methods.length === 0) {
-    return /* @__PURE__ */ jsx17(Box12, { children: /* @__PURE__ */ jsx17(Text14, { dimColor: true, children: "No payment methods found" }) });
+    return /* @__PURE__ */ jsx19(Box13, { children: /* @__PURE__ */ jsx19(Text15, { dimColor: true, children: "No payment methods found" }) });
   }
-  return /* @__PURE__ */ jsxs12(Box12, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsx17(Text14, { bold: true, children: "Payment Methods" }),
-    /* @__PURE__ */ jsx17(Box12, { flexDirection: "column", marginTop: 1, children: methods.map((pm) => {
+  return /* @__PURE__ */ jsxs13(Box13, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx19(Text15, { bold: true, children: "Payment Methods" }),
+    /* @__PURE__ */ jsx19(Box13, { flexDirection: "column", marginTop: 1, children: methods.map((pm) => {
       const label = pm.card_details?.brand ?? pm.bank_account_details?.bank_name ?? "Bank account";
       const last4 = pm.card_details?.last4 ?? pm.bank_account_details?.last4;
       const suffix = pm.nickname ? `(${pm.nickname})` : "";
       const agenticCap = pm.capabilities?.agentic_payments;
       const ineligible = agenticCap && !agenticCap.eligible;
-      return /* @__PURE__ */ jsx17(Box12, { paddingX: 2, children: /* @__PURE__ */ jsxs12(Text14, { children: [
-        /* @__PURE__ */ jsx17(Text14, { dimColor: true, children: pm.id }),
+      return /* @__PURE__ */ jsx19(Box13, { paddingX: 2, children: /* @__PURE__ */ jsxs13(Text15, { children: [
+        /* @__PURE__ */ jsx19(Text15, { dimColor: true, children: pm.id }),
         "  ",
         label,
         " ****",
         last4,
         suffix ? ` ${suffix}` : "",
-        pm.is_default ? /* @__PURE__ */ jsx17(Text14, { color: "green", children: " (default)" }) : "",
-        ineligible ? /* @__PURE__ */ jsxs12(Text14, { dimColor: true, children: [
+        pm.is_default ? /* @__PURE__ */ jsx19(Text15, { color: "green", children: " (default)" }) : "",
+        ineligible ? /* @__PURE__ */ jsxs13(Text15, { dimColor: true, children: [
           "  ",
           "agentic_payments: ineligible",
           agenticCap.ineligibility_reasons?.length > 0 ? ` (${agenticCap.ineligibility_reasons.join(", ")})` : ""
@@ -14365,9 +14980,9 @@ var PaymentMethodsList = ({
 };
 
 // src/commands/payment-methods/index.tsx
-import { jsx as jsx18 } from "react/jsx-runtime";
+import { jsx as jsx20 } from "react/jsx-runtime";
 function createPaymentMethodsCli(createResource, authStorage2, envAccessToken2) {
-  const cli2 = Cli5.create("payment-methods", {
+  const cli2 = Cli6.create("payment-methods", {
     description: "Payment methods management commands"
   });
   cli2.command("list", {
@@ -14378,7 +14993,7 @@ function createPaymentMethodsCli(createResource, authStorage2, envAccessToken2)
       const resource = createResource();
       if (!c.agent && !c.formatExplicit) {
         return renderInteractive(
-          /* @__PURE__ */ jsx18(PaymentMethodsList, { resource, onComplete: () => {
+          /* @__PURE__ */ jsx20(PaymentMethodsList, { resource, onComplete: () => {
           } }),
           () => resource.listPaymentMethods()
         );
@@ -14392,7 +15007,7 @@ function createPaymentMethodsCli(createResource, authStorage2, envAccessToken2)
     middleware: [requireAuth(authStorage2, envAccessToken2)],
     async run(c) {
       if (!c.agent && !c.formatExplicit) {
-        return renderInteractive(/* @__PURE__ */ jsx18(AddPaymentMethod, {}), () => ({
+        return renderInteractive(/* @__PURE__ */ jsx20(AddPaymentMethod, {}), () => ({
           url: WALLET_URL
         }));
       }
@@ -14403,22 +15018,22 @@ function createPaymentMethodsCli(createResource, authStorage2, envAccessToken2)
 }
 
 // src/commands/report/index.tsx
-import { Cli as Cli6 } from "incur";
+import { Cli as Cli7 } from "incur";
 
 // src/commands/report/schema.ts
-import { z as z5 } from "incur";
-var reportOptions = z5.object({
-  domain: z5.string().describe("Domain where the outcome occurred"),
-  outcome: z5.enum(REPORT_OUTCOMES).describe("What happened: success, blocked, or abandoned"),
-  spendRequestId: z5.string().describe("Spend request ID (lsrq_...)"),
-  tag: z5.array(z5.enum(REPORT_TAGS)).optional().describe("Outcome tags (repeatable)"),
-  step: z5.string().max(500).optional().describe("Where in the flow the agent was"),
-  freeformContext: z5.string().max(500).optional().describe("Additional context (max 500 chars)")
+import { z as z6 } from "incur";
+var reportOptions = z6.object({
+  domain: z6.string().describe("Domain where the outcome occurred"),
+  outcome: z6.enum(REPORT_OUTCOMES).describe("What happened: success, blocked, or abandoned"),
+  spendRequestId: z6.string().describe("Spend request ID (lsrq_...)"),
+  tag: z6.array(z6.enum(REPORT_TAGS)).optional().describe("Outcome tags (repeatable)"),
+  step: z6.string().max(500).optional().describe("Where in the flow the agent was"),
+  freeformContext: z6.string().max(500).optional().describe("Additional context (max 500 chars)")
 });
 
 // src/commands/report/index.tsx
 function createReportCli(createResource, authStorage2, envAccessToken2) {
-  const cli2 = Cli6.create("report", {
+  const cli2 = Cli7.create("report", {
     description: "Report the outcome of an agent action on a domain. Call after every purchase attempt.",
     options: reportOptions,
     outputPolicy: "agent-only",
@@ -14443,7 +15058,7 @@ function createReportCli(createResource, authStorage2, envAccessToken2) {
 import {
   createServer
 } from "http";
-import { Cli as Cli7, z as z6 } from "incur";
+import { Cli as Cli8, z as z7 } from "incur";
 async function nodeRequestToWebRequest(req, port) {
   const body = await new Promise((resolve) => {
     const chunks = [];
@@ -14469,10 +15084,10 @@ async function sendWebResponse(webRes, res) {
   res.end(Buffer.from(buffer));
 }
 function createServeCli(rootCli) {
-  return Cli7.create("serve", {
+  return Cli8.create("serve", {
     description: "Start an HTTP server exposing link-cli as an MCP endpoint at /mcp",
-    options: z6.object({
-      port: z6.coerce.number().default(54321).describe("Port to listen on")
+    options: z7.object({
+      port: z7.coerce.number().default(54321).describe("Port to listen on")
     }),
     async run(c) {
       const { port } = c.options;
@@ -14517,13 +15132,13 @@ function createServeCli(rootCli) {
 }
 
 // src/commands/shipping-address/index.tsx
-import { Cli as Cli8 } from "incur";
+import { Cli as Cli9 } from "incur";
 
 // src/commands/shipping-address/list.tsx
-import { Box as Box13, Text as Text15 } from "ink";
-import Spinner5 from "ink-spinner";
-import { useCallback as useCallback4 } from "react";
-import { jsx as jsx19, jsxs as jsxs13 } from "react/jsx-runtime";
+import { Box as Box14, Text as Text16 } from "ink";
+import Spinner6 from "ink-spinner";
+import { useCallback as useCallback5 } from "react";
+import { jsx as jsx21, jsxs as jsxs14 } from "react/jsx-runtime";
 function formatStreetLine(address) {
   const parts = [address.line_1, address.line_2].filter(Boolean);
   return parts.length > 0 ? parts.join(", ") : null;
@@ -14555,7 +15170,7 @@ var ShippingAddressList = ({
   resource,
   onComplete
 }) => {
-  const action = useCallback4(
+  const action = useCallback5(
     () => resource.listShippingAddresses(),
     [resource]
   );
@@ -14565,40 +15180,40 @@ var ShippingAddressList = ({
     error
   } = useAsyncAction(action, onComplete);
   if (status === "loading") {
-    return /* @__PURE__ */ jsx19(Box13, { children: /* @__PURE__ */ jsxs13(Text15, { color: "cyan", children: [
-      /* @__PURE__ */ jsx19(Spinner5, { type: "dots" }),
+    return /* @__PURE__ */ jsx21(Box14, { children: /* @__PURE__ */ jsxs14(Text16, { color: "cyan", children: [
+      /* @__PURE__ */ jsx21(Spinner6, { type: "dots" }),
       " Loading shipping addresses..."
     ] }) });
   }
   if (status === "error") {
-    return /* @__PURE__ */ jsxs13(Box13, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsx19(Text15, { color: "red", children: "\u2717 Failed to load shipping addresses" }),
-      /* @__PURE__ */ jsx19(Text15, { color: "red", children: error })
+    return /* @__PURE__ */ jsxs14(Box14, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx21(Text16, { color: "red", children: "\u2717 Failed to load shipping addresses" }),
+      /* @__PURE__ */ jsx21(Text16, { color: "red", children: error })
     ] });
   }
   if (!shippingAddresses || shippingAddresses.length === 0) {
-    return /* @__PURE__ */ jsx19(Box13, { children: /* @__PURE__ */ jsx19(Text15, { dimColor: true, children: "No shipping addresses found" }) });
+    return /* @__PURE__ */ jsx21(Box14, { children: /* @__PURE__ */ jsx21(Text16, { dimColor: true, children: "No shipping addresses found" }) });
   }
-  return /* @__PURE__ */ jsxs13(Box13, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsx19(Text15, { bold: true, children: "Shipping Addresses" }),
-    /* @__PURE__ */ jsx19(Box13, { flexDirection: "column", marginTop: 1, children: shippingAddresses.map((shippingAddress) => {
+  return /* @__PURE__ */ jsxs14(Box14, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx21(Text16, { bold: true, children: "Shipping Addresses" }),
+    /* @__PURE__ */ jsx21(Box14, { flexDirection: "column", marginTop: 1, children: shippingAddresses.map((shippingAddress) => {
       const addressName = shippingAddress.address?.name;
       const nickname = shippingAddress.nickname ? ` (${shippingAddress.nickname})` : "";
-      return /* @__PURE__ */ jsxs13(
-        Box13,
+      return /* @__PURE__ */ jsxs14(
+        Box14,
         {
           flexDirection: "column",
           paddingX: 2,
           marginBottom: 1,
           children: [
-            /* @__PURE__ */ jsxs13(Text15, { children: [
-              /* @__PURE__ */ jsx19(Text15, { dimColor: true, children: shippingAddress.id }),
+            /* @__PURE__ */ jsxs14(Text16, { children: [
+              /* @__PURE__ */ jsx21(Text16, { dimColor: true, children: shippingAddress.id }),
               nickname,
-              shippingAddress.is_default ? /* @__PURE__ */ jsx19(Text15, { color: "green", children: " (default)" }) : null
+              shippingAddress.is_default ? /* @__PURE__ */ jsx21(Text16, { color: "green", children: " (default)" }) : null
             ] }),
-            /* @__PURE__ */ jsxs13(Box13, { flexDirection: "column", marginTop: 1, children: [
-              addressName ? /* @__PURE__ */ jsx19(Text15, { bold: true, children: addressName }) : null,
-              formatAddressLines(shippingAddress).map((line) => /* @__PURE__ */ jsx19(Text15, { children: line }, `${shippingAddress.id}:${line}`))
+            /* @__PURE__ */ jsxs14(Box14, { flexDirection: "column", marginTop: 1, children: [
+              addressName ? /* @__PURE__ */ jsx21(Text16, { bold: true, children: addressName }) : null,
+              formatAddressLines(shippingAddress).map((line) => /* @__PURE__ */ jsx21(Text16, { children: line }, `${shippingAddress.id}:${line}`))
             ] })
           ]
         },
@@ -14609,9 +15224,9 @@ var ShippingAddressList = ({
 };
 
 // src/commands/shipping-address/index.tsx
-import { jsx as jsx20 } from "react/jsx-runtime";
+import { jsx as jsx22 } from "react/jsx-runtime";
 function createShippingAddressCli(createResource, authStorage2, envAccessToken2) {
-  const cli2 = Cli8.create("shipping-address", {
+  const cli2 = Cli9.create("shipping-address", {
     description: "Shipping address management commands"
   });
   cli2.command("list", {
@@ -14622,7 +15237,7 @@ function createShippingAddressCli(createResource, authStorage2, envAccessToken2)
       const resource = createResource();
       if (!c.agent && !c.formatExplicit) {
         return renderInteractive(
-          /* @__PURE__ */ jsx20(ShippingAddressList, { resource, onComplete: () => {
+          /* @__PURE__ */ jsx22(ShippingAddressList, { resource, onComplete: () => {
           } }),
           () => resource.listShippingAddresses()
         );
@@ -14633,8 +15248,219 @@ function createShippingAddressCli(createResource, authStorage2, envAccessToken2)
   return cli2;
 }
 
+// src/commands/sources/index.tsx
+import { Cli as Cli10 } from "incur";
+
+// src/commands/sources/list.tsx
+import { Box as Box15, Text as Text17 } from "ink";
+import Spinner7 from "ink-spinner";
+import { useCallback as useCallback6 } from "react";
+import { jsx as jsx23, jsxs as jsxs15 } from "react/jsx-runtime";
+var COLUMN_GAP2 = "  ";
+var HORIZONTAL_PADDING = 4;
+function truncateCell2(value, width) {
+  if (value.length <= width) {
+    return value;
+  }
+  if (width <= 3) {
+    return value.slice(0, width);
+  }
+  return `${value.slice(0, width - 3)}...`;
+}
+function formatCell2(value, width) {
+  return truncateCell2(value, width).padEnd(width);
+}
+function sourceId(source, index) {
+  return typeof source.id === "string" && source.id.length > 0 ? source.id : `source-${index + 1}`;
+}
+function statusFromValue(value) {
+  if (value && typeof value === "object" && !Array.isArray(value)) {
+    const status = value.status;
+    return typeof status === "string" ? status : null;
+  }
+  return null;
+}
+function formatCapabilities(source) {
+  const capabilities = source.capabilities;
+  if (!capabilities || typeof capabilities !== "object") {
+    return "-";
+  }
+  const entries = Object.entries(capabilities).map(([capability, value]) => {
+    const status = statusFromValue(value);
+    return status ? `${capability}:${status}` : capability;
+  }).sort();
+  return entries.length > 0 ? entries.join(", ") : "-";
+}
+function formatExternalConnection(source) {
+  const status = statusFromValue(source.external_connection);
+  return status ?? "-";
+}
+function sourceRow(source, index) {
+  const capabilities = formatCapabilities(source);
+  const external = formatExternalConnection(source);
+  return {
+    key: sourceId(source, index),
+    name: source.name ?? "Source",
+    type: source.type ?? "-",
+    id: sourceId(source, index),
+    capabilities,
+    external
+  };
+}
+function tableColumns() {
+  return [
+    { label: "Name", value: (row) => row.name, minWidth: 14, maxWidth: 24 },
+    { label: "Type", value: (row) => row.type, minWidth: 10, maxWidth: 14 },
+    { label: "ID", value: (row) => row.id, minWidth: 16, maxWidth: 48 },
+    {
+      label: "Capabilities",
+      value: (row) => row.capabilities,
+      minWidth: 8,
+      maxWidth: 48
+    },
+    {
+      label: "External connection status",
+      value: (row) => row.external,
+      minWidth: 8,
+      maxWidth: 36
+    }
+  ];
+}
+function distributeWidths(columns, availableWidth) {
+  const gapWidth = COLUMN_GAP2.length * Math.max(0, columns.length - 1);
+  const contentWidth2 = Math.max(columns.length, availableWidth - gapWidth);
+  const widths = columns.map((column) => column.minWidth);
+  let remaining = contentWidth2 - widths.reduce((total, width) => total + width, 0);
+  while (remaining > 0) {
+    let changed = false;
+    for (let index = 0; index < columns.length && remaining > 0; index += 1) {
+      if (widths[index] >= columns[index].maxWidth) {
+        continue;
+      }
+      widths[index] += 1;
+      remaining -= 1;
+      changed = true;
+    }
+    if (!changed) {
+      break;
+    }
+  }
+  return widths;
+}
+function renderTableRows(rows, terminalWidth) {
+  const columns = tableColumns();
+  const availableWidth = contentWidth(terminalWidth);
+  const widths = distributeWidths(columns, availableWidth);
+  const headerRow = columns.map((column, index) => formatCell2(column.label, widths[index])).join(COLUMN_GAP2).slice(0, availableWidth);
+  const separatorRow = "-".repeat(headerRow.length).slice(0, availableWidth);
+  const bodyRows = rows.map(
+    (row) => columns.map((column, index) => formatCell2(column.value(row), widths[index])).join(COLUMN_GAP2).slice(0, availableWidth)
+  );
+  return { headerRow, separatorRow, bodyRows };
+}
+function contentWidth(terminalWidth) {
+  return Math.max(1, terminalWidth - HORIZONTAL_PADDING);
+}
+var SourcesList = ({
+  resource,
+  params,
+  onComplete
+}) => {
+  const action = useCallback6(
+    () => resource.listSources(params),
+    [resource, params]
+  );
+  const { status, data: page, error } = useAsyncAction(action, onComplete);
+  const sources = page?.data ?? [];
+  const nextCursor = page?.has_more && sources.length > 0 ? sources[sources.length - 1].id : null;
+  const rows = sources.map(sourceRow);
+  const terminalWidth = process.stdout.columns ?? 140;
+  const { headerRow, separatorRow, bodyRows } = renderTableRows(
+    rows,
+    terminalWidth
+  );
+  if (status === "loading") {
+    return /* @__PURE__ */ jsx23(Box15, { children: /* @__PURE__ */ jsxs15(Text17, { color: "cyan", children: [
+      /* @__PURE__ */ jsx23(Spinner7, { type: "dots" }),
+      " Loading sources..."
+    ] }) });
+  }
+  if (status === "error") {
+    return /* @__PURE__ */ jsxs15(Box15, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx23(Text17, { color: "red", children: "Failed to load sources" }),
+      /* @__PURE__ */ jsx23(Text17, { color: "red", children: error })
+    ] });
+  }
+  if (sources.length === 0) {
+    return /* @__PURE__ */ jsx23(Box15, { children: /* @__PURE__ */ jsx23(Text17, { dimColor: true, children: "No sources found" }) });
+  }
+  return /* @__PURE__ */ jsxs15(Box15, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx23(Text17, { bold: true, children: "Sources" }),
+    /* @__PURE__ */ jsxs15(Box15, { flexDirection: "column", marginTop: 1, paddingX: 2, children: [
+      /* @__PURE__ */ jsx23(Text17, { bold: true, children: headerRow }),
+      /* @__PURE__ */ jsx23(Text17, { dimColor: true, children: separatorRow }),
+      bodyRows.map((row, index) => /* @__PURE__ */ jsx23(Text17, { children: row }, rows[index].key))
+    ] }),
+    page?.has_more !== void 0 ? /* @__PURE__ */ jsxs15(Box15, { flexDirection: "column", marginTop: 1, children: [
+      /* @__PURE__ */ jsxs15(Text17, { dimColor: true, children: [
+        "has_more: ",
+        String(page.has_more)
+      ] }),
+      typeof nextCursor === "string" && nextCursor.length > 0 ? /* @__PURE__ */ jsx23(Text17, { dimColor: true, children: `next page: --starting-after ${nextCursor}` }) : null
+    ] }) : null
+  ] });
+};
+
+// src/commands/sources/schema.ts
+import { z as z8 } from "incur";
+var listOptions2 = z8.object({
+  limit: z8.coerce.number().int().positive().max(100).optional().describe("Maximum number of sources to return (1-100)."),
+  startingAfter: z8.string().optional().describe("Cursor: return sources after this source ID."),
+  endingBefore: z8.string().optional().describe("Cursor: return sources before this source ID.")
+});
+
+// src/commands/sources/index.tsx
+import { jsx as jsx24 } from "react/jsx-runtime";
+function createSourcesCli(createResource, authStorage2, envAccessToken2) {
+  const cli2 = Cli10.create("sources", {
+    description: "List sources from your Link wallet"
+  });
+  cli2.command("list", {
+    description: "List sources from your Link wallet",
+    options: listOptions2,
+    outputPolicy: "agent-only",
+    middleware: [requireAuth(authStorage2, envAccessToken2)],
+    async run(c) {
+      const opts = c.options;
+      const resource = createResource();
+      const params = {};
+      if (opts.limit !== void 0) params.limit = opts.limit;
+      if (opts.startingAfter !== void 0)
+        params.starting_after = opts.startingAfter;
+      if (opts.endingBefore !== void 0)
+        params.ending_before = opts.endingBefore;
+      if (!c.agent && !c.formatExplicit) {
+        return renderInteractive(
+          /* @__PURE__ */ jsx24(
+            SourcesList,
+            {
+              resource,
+              params,
+              onComplete: () => {
+              }
+            }
+          ),
+          () => resource.listSources(params)
+        );
+      }
+      return resource.listSources(params);
+    }
+  });
+  return cli2;
+}
+
 // src/commands/spend-request/index.tsx
-import { Cli as Cli9, z as z9 } from "incur";
+import { Cli as Cli11, z as z11 } from "incur";
 
 // src/utils/credential-output.ts
 import { constants } from "fs";
@@ -14692,21 +15518,21 @@ async function writeCredentialFile(filePath, data, force) {
 }
 
 // src/utils/line-item-parser.ts
-import { z as z7 } from "zod";
-var LineItemSchema = z7.object({
-  name: z7.string(),
-  url: z7.string().optional(),
-  image_url: z7.string().optional(),
-  description: z7.string().optional(),
-  sku: z7.string().optional(),
-  quantity: z7.coerce.number().optional(),
-  unit_amount: z7.coerce.number().optional(),
-  product_url: z7.string().optional()
+import { z as z9 } from "zod";
+var LineItemSchema = z9.object({
+  name: z9.string(),
+  url: z9.string().optional(),
+  image_url: z9.string().optional(),
+  description: z9.string().optional(),
+  sku: z9.string().optional(),
+  quantity: z9.coerce.number().optional(),
+  unit_amount: z9.coerce.number().optional(),
+  product_url: z9.string().optional()
 }).strict();
-var TotalSchema = z7.object({
-  type: z7.string(),
-  display_text: z7.string(),
-  amount: z7.coerce.number()
+var TotalSchema = z9.object({
+  type: z9.string(),
+  display_text: z9.string(),
+  amount: z9.coerce.number()
 }).strict();
 function parseKvString(raw) {
   const result = {};
@@ -14736,7 +15562,7 @@ function parseLineItemFlag(raw) {
   try {
     return LineItemSchema.parse(obj);
   } catch (err) {
-    if (err instanceof z7.ZodError)
+    if (err instanceof z9.ZodError)
       throw formatZodError(err, "Line item", LineItemSchema);
     throw err;
   }
@@ -14746,65 +15572,65 @@ function parseTotalFlag(raw) {
   try {
     return TotalSchema.parse(obj);
   } catch (err) {
-    if (err instanceof z7.ZodError)
+    if (err instanceof z9.ZodError)
       throw formatZodError(err, "Total", TotalSchema);
     throw err;
   }
 }
 
 // src/commands/spend-request/cancel.tsx
-import { Box as Box14, Text as Text16 } from "ink";
-import Spinner6 from "ink-spinner";
-import { useCallback as useCallback5 } from "react";
-import { jsx as jsx21, jsxs as jsxs14 } from "react/jsx-runtime";
+import { Box as Box16, Text as Text18 } from "ink";
+import Spinner8 from "ink-spinner";
+import { useCallback as useCallback7 } from "react";
+import { jsx as jsx25, jsxs as jsxs16 } from "react/jsx-runtime";
 var CancelSpendRequest = ({
   repository,
   id,
   onComplete
 }) => {
-  const action = useCallback5(
+  const action = useCallback7(
     () => repository.cancelSpendRequest(id),
     [repository, id]
   );
   const { status, data: request, error } = useAsyncAction(action, onComplete);
   if (status === "loading") {
-    return /* @__PURE__ */ jsx21(Box14, { children: /* @__PURE__ */ jsxs14(Text16, { color: "cyan", children: [
-      /* @__PURE__ */ jsx21(Spinner6, { type: "dots" }),
+    return /* @__PURE__ */ jsx25(Box16, { children: /* @__PURE__ */ jsxs16(Text18, { color: "cyan", children: [
+      /* @__PURE__ */ jsx25(Spinner8, { type: "dots" }),
       " Canceling spend request ",
       id,
       "..."
     ] }) });
   }
   if (status === "error") {
-    return /* @__PURE__ */ jsxs14(Box14, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsx21(Text16, { color: "red", children: "\u2717 Failed to cancel spend request" }),
-      /* @__PURE__ */ jsx21(Text16, { color: "red", children: error })
+    return /* @__PURE__ */ jsxs16(Box16, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx25(Text18, { color: "red", children: "\u2717 Failed to cancel spend request" }),
+      /* @__PURE__ */ jsx25(Text18, { color: "red", children: error })
     ] });
   }
-  return /* @__PURE__ */ jsxs14(Box14, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsx21(Text16, { color: "green", children: "\u2713 Spend request canceled" }),
-    /* @__PURE__ */ jsx21(Box14, { flexDirection: "column", marginTop: 1, paddingX: 2, children: /* @__PURE__ */ jsxs14(Text16, { children: [
+  return /* @__PURE__ */ jsxs16(Box16, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx25(Text18, { color: "green", children: "\u2713 Spend request canceled" }),
+    /* @__PURE__ */ jsx25(Box16, { flexDirection: "column", marginTop: 1, paddingX: 2, children: /* @__PURE__ */ jsxs16(Text18, { children: [
       "ID: ",
-      /* @__PURE__ */ jsx21(Text16, { bold: true, children: request?.id })
+      /* @__PURE__ */ jsx25(Text18, { bold: true, children: request?.id })
     ] }) })
   ] });
 };
 
 // src/commands/spend-request/create.tsx
-import { Box as Box16, Text as Text18 } from "ink";
-import Spinner8 from "ink-spinner";
-import { useCallback as useCallback6, useEffect as useEffect9, useState as useState9 } from "react";
+import { Box as Box18, Text as Text20, useApp as useApp4 } from "ink";
+import Spinner10 from "ink-spinner";
+import { useCallback as useCallback8, useEffect as useEffect9, useState as useState9 } from "react";
 
 // src/commands/spend-request/approval-waiting-view.tsx
-import { Box as Box15, Text as Text17 } from "ink";
-import Spinner7 from "ink-spinner";
-import { jsx as jsx22, jsxs as jsxs15 } from "react/jsx-runtime";
+import { Box as Box17, Text as Text19 } from "ink";
+import Spinner9 from "ink-spinner";
+import { jsx as jsx26, jsxs as jsxs17 } from "react/jsx-runtime";
 var ApprovalWaitingView = ({
   status,
   approvalUrl
-}) => /* @__PURE__ */ jsxs15(Box15, { flexDirection: "column", paddingY: 1, children: [
-  /* @__PURE__ */ jsxs15(
-    Box15,
+}) => /* @__PURE__ */ jsxs17(Box17, { flexDirection: "column", paddingY: 1, children: [
+  /* @__PURE__ */ jsxs17(
+    Box17,
     {
       flexDirection: "column",
       borderStyle: "round",
@@ -14812,20 +15638,20 @@ var ApprovalWaitingView = ({
       paddingX: 2,
       paddingY: 1,
       children: [
-        /* @__PURE__ */ jsxs15(Text17, { children: [
+        /* @__PURE__ */ jsxs17(Text19, { children: [
           "Approve at:",
           " ",
-          /* @__PURE__ */ jsx22(Text17, { bold: true, color: "cyan", children: approvalUrl })
+          /* @__PURE__ */ jsx26(Text19, { bold: true, color: "cyan", children: approvalUrl })
         ] }),
-        /* @__PURE__ */ jsx22(Text17, { dimColor: true, children: "Press Enter to open in browser" })
+        /* @__PURE__ */ jsx26(Text19, { dimColor: true, children: "Press Enter to open in browser" })
       ]
     }
   ),
-  /* @__PURE__ */ jsx22(AppDownloadQrCodes, {}),
-  /* @__PURE__ */ jsx22(Box15, { marginTop: 1, children: status === "polling" ? /* @__PURE__ */ jsxs15(Text17, { color: "cyan", children: [
-    /* @__PURE__ */ jsx22(Spinner7, { type: "dots" }),
+  /* @__PURE__ */ jsx26(AppDownloadQrCodes, {}),
+  /* @__PURE__ */ jsx26(Box17, { marginTop: 1, children: status === "polling" ? /* @__PURE__ */ jsxs17(Text19, { color: "cyan", children: [
+    /* @__PURE__ */ jsx26(Spinner9, { type: "dots" }),
     " Waiting for approval..."
-  ] }) : /* @__PURE__ */ jsx22(Text17, { dimColor: true, children: "Waiting..." }) })
+  ] }) : /* @__PURE__ */ jsx26(Text19, { dimColor: true, children: "Waiting..." }) })
 ] });
 
 // src/commands/spend-request/use-approval-polling.ts
@@ -14894,7 +15720,7 @@ function useApprovalPolling({
 }
 
 // src/commands/spend-request/create.tsx
-import { Fragment as Fragment4, jsx as jsx23, jsxs as jsxs16 } from "react/jsx-runtime";
+import { Fragment as Fragment4, jsx as jsx27, jsxs as jsxs18 } from "react/jsx-runtime";
 var CreateSpendRequest = ({
   repository,
   params,
@@ -14906,21 +15732,30 @@ var CreateSpendRequest = ({
   const [status, setStatus] = useState9("creating");
   const [request, setRequest] = useState9(null);
   const [error, setError] = useState9("");
+  const [verificationUrl, setVerificationUrl] = useState9("");
   const [outputFilePath, setOutputFilePath] = useState9(null);
   const [fileError, setFileError] = useState9("");
   const approvalUrl = request?.approval_url ?? "";
-  const onSuccess = useCallback6(
+  const { exit } = useApp4();
+  const completeAndExit = useCallback8(
+    (result) => {
+      onComplete(result);
+      exit();
+    },
+    [onComplete, exit]
+  );
+  const onSuccess = useCallback8(
     (result) => setRequest(result),
     []
   );
-  const onError = useCallback6((msg) => setError(msg), []);
+  const onError = useCallback8((msg) => setError(msg), []);
   useApprovalPolling({
     status,
     setStatus,
     approvalUrl,
     repository,
     requestId: request?.id ?? null,
-    onComplete,
+    onComplete: completeAndExit,
     onSuccess,
     onError
   });
@@ -14933,16 +15768,20 @@ var CreateSpendRequest = ({
           setStatus("waiting");
         } else {
           setStatus("success");
-          setTimeout(() => onComplete(result), DISPLAY_DELAY_MS);
+          setTimeout(() => completeAndExit(result), DISPLAY_DELAY_MS);
         }
       } catch (err) {
         setError(err.message);
+        if (err instanceof LinkApiError) {
+          const url = err.details?.error?.verification_url;
+          if (url) setVerificationUrl(url);
+        }
         setStatus("error");
-        setTimeout(() => onComplete(null), DISPLAY_DELAY_MS);
+        setTimeout(() => completeAndExit(null), DISPLAY_DELAY_MS);
       }
     };
     create();
-  }, [repository, params, requestApproval, onComplete]);
+  }, [repository, params, requestApproval, completeAndExit]);
   useEffect9(() => {
     if (status !== "success" || !outputFile || !request?.card) return;
     const fileData = {
@@ -14956,101 +15795,105 @@ var CreateSpendRequest = ({
     writeCredentialFile(outputFile, fileData, force ?? false).then((path7) => setOutputFilePath(path7)).catch((err) => setFileError(err.message));
   }, [status, outputFile, force, request]);
   if (status === "creating") {
-    return /* @__PURE__ */ jsx23(Box16, { children: /* @__PURE__ */ jsxs16(Text18, { color: "cyan", children: [
-      /* @__PURE__ */ jsx23(Spinner8, { type: "dots" }),
+    return /* @__PURE__ */ jsx27(Box18, { children: /* @__PURE__ */ jsxs18(Text20, { color: "cyan", children: [
+      /* @__PURE__ */ jsx27(Spinner10, { type: "dots" }),
       " Creating spend request..."
     ] }) });
   }
   if (status === "error") {
-    return /* @__PURE__ */ jsxs16(Box16, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsx23(Text18, { color: "red", children: "\u2717 Failed to create spend request" }),
-      /* @__PURE__ */ jsx23(Text18, { color: "red", children: error })
+    return /* @__PURE__ */ jsxs18(Box18, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx27(Text20, { color: "red", children: "\u2717 Failed to create spend request" }),
+      /* @__PURE__ */ jsx27(Text20, { color: "red", children: error }),
+      verificationUrl && /* @__PURE__ */ jsxs18(Text20, { color: "red", children: [
+        "Complete additional verification at: ",
+        verificationUrl
+      ] })
     ] });
   }
   if (status === "success") {
-    return /* @__PURE__ */ jsxs16(Box16, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsx23(Text18, { color: "green", children: "\u2713 Spend request created" }),
-      /* @__PURE__ */ jsxs16(Box16, { flexDirection: "column", marginTop: 1, paddingX: 2, children: [
-        /* @__PURE__ */ jsxs16(Text18, { children: [
+    return /* @__PURE__ */ jsxs18(Box18, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx27(Text20, { color: "green", children: "\u2713 Spend request created" }),
+      /* @__PURE__ */ jsxs18(Box18, { flexDirection: "column", marginTop: 1, paddingX: 2, children: [
+        /* @__PURE__ */ jsxs18(Text20, { children: [
           "ID: ",
-          /* @__PURE__ */ jsx23(Text18, { bold: true, children: request?.id })
+          /* @__PURE__ */ jsx27(Text20, { bold: true, children: request?.id })
         ] }),
-        /* @__PURE__ */ jsxs16(Text18, { children: [
+        /* @__PURE__ */ jsxs18(Text20, { children: [
           "Status: ",
-          /* @__PURE__ */ jsx23(Text18, { bold: true, children: request?.status })
+          /* @__PURE__ */ jsx27(Text20, { bold: true, children: request?.status })
         ] }),
-        /* @__PURE__ */ jsxs16(Text18, { children: [
+        /* @__PURE__ */ jsxs18(Text20, { children: [
           "Amount:",
           " ",
-          /* @__PURE__ */ jsx23(Text18, { bold: true, children: request?.amount != null ? `${request.amount} ${request.currency?.toUpperCase() ?? ""}`.trim() : "N/A" })
+          /* @__PURE__ */ jsx27(Text20, { bold: true, children: request?.amount != null ? `${request.amount} ${request.currency?.toUpperCase() ?? ""}`.trim() : "N/A" })
         ] }),
-        /* @__PURE__ */ jsxs16(Text18, { children: [
+        /* @__PURE__ */ jsxs18(Text20, { children: [
           "Merchant: ",
-          /* @__PURE__ */ jsx23(Text18, { bold: true, children: request?.merchant_name })
+          /* @__PURE__ */ jsx27(Text20, { bold: true, children: request?.merchant_name })
         ] }),
-        /* @__PURE__ */ jsxs16(Text18, { children: [
+        /* @__PURE__ */ jsxs18(Text20, { children: [
           "Line Items:",
           " ",
-          /* @__PURE__ */ jsx23(Text18, { bold: true, children: request?.line_items.map((li) => li.name).join(", ") || "N/A" })
+          /* @__PURE__ */ jsx27(Text20, { bold: true, children: request?.line_items.map((li) => li.name).join(", ") || "N/A" })
         ] }),
-        request?.credential_type === "shared_payment_token" && request.shared_payment_token && /* @__PURE__ */ jsxs16(Text18, { children: [
+        request?.credential_type === "shared_payment_token" && request.shared_payment_token && /* @__PURE__ */ jsxs18(Text20, { children: [
           "Token: ",
-          /* @__PURE__ */ jsx23(Text18, { bold: true, children: request.shared_payment_token.id })
+          /* @__PURE__ */ jsx27(Text20, { bold: true, children: request.shared_payment_token.id })
         ] })
       ] }),
-      request?.card && !outputFile && /* @__PURE__ */ jsxs16(Box16, { flexDirection: "column", marginTop: 1, children: [
-        /* @__PURE__ */ jsx23(Text18, { bold: true, children: "Card Details:" }),
-        /* @__PURE__ */ jsxs16(Text18, { children: [
+      request?.card && !outputFile && /* @__PURE__ */ jsxs18(Box18, { flexDirection: "column", marginTop: 1, children: [
+        /* @__PURE__ */ jsx27(Text20, { bold: true, children: "Card Details:" }),
+        /* @__PURE__ */ jsxs18(Text20, { children: [
           " ",
           "Number: ",
-          /* @__PURE__ */ jsx23(Text18, { bold: true, children: request.card.number })
+          /* @__PURE__ */ jsx27(Text20, { bold: true, children: request.card.number })
         ] }),
-        /* @__PURE__ */ jsxs16(Text18, { children: [
+        /* @__PURE__ */ jsxs18(Text20, { children: [
           " ",
           "Brand: ",
-          /* @__PURE__ */ jsx23(Text18, { bold: true, children: request.card.brand })
+          /* @__PURE__ */ jsx27(Text20, { bold: true, children: request.card.brand })
         ] }),
-        /* @__PURE__ */ jsxs16(Text18, { children: [
+        /* @__PURE__ */ jsxs18(Text20, { children: [
           " ",
           "Expiry:",
           " ",
-          /* @__PURE__ */ jsxs16(Text18, { bold: true, children: [
+          /* @__PURE__ */ jsxs18(Text20, { bold: true, children: [
             String(request.card.exp_month).padStart(2, "0"),
             "/",
             request.card.exp_year
           ] })
         ] }),
-        request.card.cvc && /* @__PURE__ */ jsxs16(Text18, { children: [
+        request.card.cvc && /* @__PURE__ */ jsxs18(Text20, { children: [
           " ",
           "CVC: ",
-          /* @__PURE__ */ jsx23(Text18, { bold: true, children: request.card.cvc })
+          /* @__PURE__ */ jsx27(Text20, { bold: true, children: request.card.cvc })
         ] }),
-        request.card.valid_until && /* @__PURE__ */ jsxs16(Text18, { children: [
+        request.card.valid_until && /* @__PURE__ */ jsxs18(Text20, { children: [
           " ",
           "Valid Until: ",
-          /* @__PURE__ */ jsx23(Text18, { bold: true, children: request.card.valid_until })
+          /* @__PURE__ */ jsx27(Text20, { bold: true, children: request.card.valid_until })
         ] })
       ] }),
-      request?.card && outputFile && /* @__PURE__ */ jsxs16(Box16, { flexDirection: "column", marginTop: 1, children: [
-        outputFilePath && /* @__PURE__ */ jsxs16(Text18, { color: "green", children: [
+      request?.card && outputFile && /* @__PURE__ */ jsxs18(Box18, { flexDirection: "column", marginTop: 1, children: [
+        outputFilePath && /* @__PURE__ */ jsxs18(Text20, { color: "green", children: [
           "Card credentials written to ",
-          /* @__PURE__ */ jsx23(Text18, { bold: true, children: outputFilePath })
+          /* @__PURE__ */ jsx27(Text20, { bold: true, children: outputFilePath })
         ] }),
-        fileError && /* @__PURE__ */ jsxs16(Text18, { color: "red", children: [
+        fileError && /* @__PURE__ */ jsxs18(Text20, { color: "red", children: [
           "Failed to write card file: ",
           fileError
         ] })
       ] }),
-      /* @__PURE__ */ jsx23(AppDownloadQrCodes, {})
+      /* @__PURE__ */ jsx27(AppDownloadQrCodes, {})
     ] });
   }
-  return /* @__PURE__ */ jsxs16(Fragment4, { children: [
-    /* @__PURE__ */ jsx23(Box16, { children: /* @__PURE__ */ jsxs16(Text18, { color: "green", children: [
+  return /* @__PURE__ */ jsxs18(Fragment4, { children: [
+    /* @__PURE__ */ jsx27(Box18, { children: /* @__PURE__ */ jsxs18(Text20, { color: "green", children: [
       "\u2713 Spend request created (ID: ",
-      /* @__PURE__ */ jsx23(Text18, { bold: true, children: request?.id }),
+      /* @__PURE__ */ jsx27(Text20, { bold: true, children: request?.id }),
       ")"
     ] }) }),
-    /* @__PURE__ */ jsx23(
+    /* @__PURE__ */ jsx27(
       ApprovalWaitingView,
       {
         status,
@@ -15061,21 +15904,21 @@ var CreateSpendRequest = ({
 };
 
 // src/commands/spend-request/list.tsx
-import { Box as Box17, Text as Text19, useApp as useApp4 } from "ink";
-import Spinner9 from "ink-spinner";
-import { useCallback as useCallback7 } from "react";
-import { jsx as jsx24, jsxs as jsxs17 } from "react/jsx-runtime";
+import { Box as Box19, Text as Text21, useApp as useApp5 } from "ink";
+import Spinner11 from "ink-spinner";
+import { useCallback as useCallback9 } from "react";
+import { jsx as jsx28, jsxs as jsxs19 } from "react/jsx-runtime";
 var SpendRequestList = ({
   repository,
   includeHistory = false,
   onComplete
 }) => {
-  const { exit } = useApp4();
-  const action = useCallback7(
+  const { exit } = useApp5();
+  const action = useCallback9(
     () => repository.listSpendRequests({ includeHistory }),
     [repository, includeHistory]
   );
-  const wrappedOnComplete = useCallback7(
+  const wrappedOnComplete = useCallback9(
     (result) => {
       onComplete(result);
       exit();
@@ -15088,29 +15931,29 @@ var SpendRequestList = ({
     error
   } = useAsyncAction(action, wrappedOnComplete);
   if (status === "loading") {
-    return /* @__PURE__ */ jsx24(Box17, { children: /* @__PURE__ */ jsxs17(Text19, { color: "cyan", children: [
-      /* @__PURE__ */ jsx24(Spinner9, { type: "dots" }),
+    return /* @__PURE__ */ jsx28(Box19, { children: /* @__PURE__ */ jsxs19(Text21, { color: "cyan", children: [
+      /* @__PURE__ */ jsx28(Spinner11, { type: "dots" }),
       " Loading spend requests..."
     ] }) });
   }
   if (status === "error") {
-    return /* @__PURE__ */ jsxs17(Box17, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsx24(Text19, { color: "red", children: "\u2717 Failed to load spend requests" }),
-      /* @__PURE__ */ jsx24(Text19, { color: "red", children: error })
+    return /* @__PURE__ */ jsxs19(Box19, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx28(Text21, { color: "red", children: "\u2717 Failed to load spend requests" }),
+      /* @__PURE__ */ jsx28(Text21, { color: "red", children: error })
     ] });
   }
   if (!requests || requests.length === 0) {
-    return /* @__PURE__ */ jsx24(Box17, { children: /* @__PURE__ */ jsx24(Text19, { dimColor: true, children: includeHistory ? "No spend requests found" : "No active spend requests found" }) });
+    return /* @__PURE__ */ jsx28(Box19, { children: /* @__PURE__ */ jsx28(Text21, { dimColor: true, children: includeHistory ? "No spend requests found" : "No active spend requests found" }) });
   }
-  return /* @__PURE__ */ jsxs17(Box17, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsx24(Text19, { bold: true, children: includeHistory ? "All Spend Requests" : "Active Spend Requests" }),
-    /* @__PURE__ */ jsx24(Box17, { flexDirection: "column", marginTop: 1, children: requests.map((sr) => {
+  return /* @__PURE__ */ jsxs19(Box19, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx28(Text21, { bold: true, children: includeHistory ? "All Spend Requests" : "Active Spend Requests" }),
+    /* @__PURE__ */ jsx28(Box19, { flexDirection: "column", marginTop: 1, children: requests.map((sr) => {
       const statusColor = sr.status === "approved" ? "green" : sr.status === "pending_approval" ? "yellow" : "white";
       const amount = sr.amount != null ? `$${(sr.amount / 100).toFixed(2)} ${(sr.currency ?? "usd").toUpperCase()}` : "";
-      return /* @__PURE__ */ jsx24(Box17, { paddingX: 2, children: /* @__PURE__ */ jsxs17(Text19, { children: [
-        /* @__PURE__ */ jsx24(Text19, { dimColor: true, children: sr.id }),
+      return /* @__PURE__ */ jsx28(Box19, { paddingX: 2, children: /* @__PURE__ */ jsxs19(Text21, { children: [
+        /* @__PURE__ */ jsx28(Text21, { dimColor: true, children: sr.id }),
         "  ",
-        /* @__PURE__ */ jsx24(Text19, { color: statusColor, children: sr.status }),
+        /* @__PURE__ */ jsx28(Text21, { color: statusColor, children: sr.status }),
         sr.merchant_name ? `  ${sr.merchant_name}` : "",
         amount ? `  ${amount}` : ""
       ] }) }, sr.id);
@@ -15119,10 +15962,10 @@ var SpendRequestList = ({
 };
 
 // src/commands/spend-request/request-approval.tsx
-import { Box as Box18, Text as Text20 } from "ink";
-import Spinner10 from "ink-spinner";
-import { useCallback as useCallback8, useEffect as useEffect10, useState as useState10 } from "react";
-import { jsx as jsx25, jsxs as jsxs18 } from "react/jsx-runtime";
+import { Box as Box20, Text as Text22, useApp as useApp6 } from "ink";
+import Spinner12 from "ink-spinner";
+import { useCallback as useCallback10, useEffect as useEffect10, useState as useState10 } from "react";
+import { jsx as jsx29, jsxs as jsxs20 } from "react/jsx-runtime";
 var RequestApproval = ({
   repository,
   id,
@@ -15132,15 +15975,24 @@ var RequestApproval = ({
   const [approvalUrl, setApprovalUrl] = useState10("");
   const [result, setResult] = useState10(null);
   const [error, setError] = useState10("");
-  const onSuccess = useCallback8((r) => setResult(r), []);
-  const onError = useCallback8((msg) => setError(msg), []);
+  const [verificationUrl, setVerificationUrl] = useState10("");
+  const { exit } = useApp6();
+  const completeAndExit = useCallback10(
+    (result2) => {
+      onComplete(result2);
+      exit();
+    },
+    [onComplete, exit]
+  );
+  const onSuccess = useCallback10((r) => setResult(r), []);
+  const onError = useCallback10((msg) => setError(msg), []);
   useApprovalPolling({
     status,
     setStatus,
     approvalUrl,
     repository,
     requestId: id,
-    onComplete,
+    onComplete: completeAndExit,
     onSuccess,
     onError
   });
@@ -15152,52 +16004,64 @@ var RequestApproval = ({
         setStatus("waiting");
       } catch (err) {
         setError(err.message);
+        if (err instanceof LinkApiError) {
+          const url = err.details?.error?.verification_url;
+          if (url) setVerificationUrl(url);
+        }
         setStatus("error");
+        setTimeout(() => {
+          onComplete(null);
+          exit();
+        }, DISPLAY_DELAY_MS);
       }
     };
     request();
-  }, [repository, id]);
+  }, [repository, id, exit, onComplete]);
   if (status === "requesting") {
-    return /* @__PURE__ */ jsx25(Box18, { children: /* @__PURE__ */ jsxs18(Text20, { color: "cyan", children: [
-      /* @__PURE__ */ jsx25(Spinner10, { type: "dots" }),
+    return /* @__PURE__ */ jsx29(Box20, { children: /* @__PURE__ */ jsxs20(Text22, { color: "cyan", children: [
+      /* @__PURE__ */ jsx29(Spinner12, { type: "dots" }),
       " Requesting approval..."
     ] }) });
   }
   if (status === "error") {
-    return /* @__PURE__ */ jsxs18(Box18, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsx25(Text20, { color: "red", children: "\u2717 Failed to request approval" }),
-      /* @__PURE__ */ jsx25(Text20, { color: "red", children: error })
+    return /* @__PURE__ */ jsxs20(Box20, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx29(Text22, { color: "red", children: "\u2717 Failed to request approval" }),
+      /* @__PURE__ */ jsx29(Text22, { color: "red", children: error }),
+      verificationUrl && /* @__PURE__ */ jsxs20(Text22, { color: "red", children: [
+        "Complete additional verification at: ",
+        verificationUrl
+      ] })
     ] });
   }
   if (status === "success") {
-    return /* @__PURE__ */ jsxs18(Box18, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsx25(Text20, { color: "green", children: "\u2713 Approval completed" }),
-      /* @__PURE__ */ jsxs18(Box18, { flexDirection: "column", marginTop: 1, paddingX: 2, children: [
-        /* @__PURE__ */ jsxs18(Text20, { children: [
+    return /* @__PURE__ */ jsxs20(Box20, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx29(Text22, { color: "green", children: "\u2713 Approval completed" }),
+      /* @__PURE__ */ jsxs20(Box20, { flexDirection: "column", marginTop: 1, paddingX: 2, children: [
+        /* @__PURE__ */ jsxs20(Text22, { children: [
           "ID: ",
-          /* @__PURE__ */ jsx25(Text20, { bold: true, children: result?.id })
+          /* @__PURE__ */ jsx29(Text22, { bold: true, children: result?.id })
         ] }),
-        /* @__PURE__ */ jsxs18(Text20, { children: [
+        /* @__PURE__ */ jsxs20(Text22, { children: [
           "Status: ",
-          /* @__PURE__ */ jsx25(Text20, { bold: true, children: result?.status })
+          /* @__PURE__ */ jsx29(Text22, { bold: true, children: result?.status })
         ] }),
-        /* @__PURE__ */ jsxs18(Text20, { children: [
+        /* @__PURE__ */ jsxs20(Text22, { children: [
           "Amount:",
           " ",
-          /* @__PURE__ */ jsx25(Text20, { bold: true, children: result?.amount != null ? `${result.amount} ${result.currency?.toUpperCase() ?? ""}`.trim() : "N/A" })
+          /* @__PURE__ */ jsx29(Text22, { bold: true, children: result?.amount != null ? `${result.amount} ${result.currency?.toUpperCase() ?? ""}`.trim() : "N/A" })
         ] }),
-        /* @__PURE__ */ jsxs18(Text20, { children: [
+        /* @__PURE__ */ jsxs20(Text22, { children: [
           "Merchant: ",
-          /* @__PURE__ */ jsx25(Text20, { bold: true, children: result?.merchant_name })
+          /* @__PURE__ */ jsx29(Text22, { bold: true, children: result?.merchant_name })
         ] }),
-        result?.credential_type === "shared_payment_token" && result.shared_payment_token && /* @__PURE__ */ jsxs18(Text20, { children: [
+        result?.credential_type === "shared_payment_token" && result.shared_payment_token && /* @__PURE__ */ jsxs20(Text22, { children: [
           "Token: ",
-          /* @__PURE__ */ jsx25(Text20, { bold: true, children: result.shared_payment_token.id })
+          /* @__PURE__ */ jsx29(Text22, { bold: true, children: result.shared_payment_token.id })
         ] })
       ] })
     ] });
   }
-  return /* @__PURE__ */ jsx25(
+  return /* @__PURE__ */ jsx29(
     ApprovalWaitingView,
     {
       status,
@@ -15207,10 +16071,10 @@ var RequestApproval = ({
 };
 
 // src/commands/spend-request/retrieve.tsx
-import { Box as Box19, Text as Text21 } from "ink";
-import Spinner11 from "ink-spinner";
+import { Box as Box21, Text as Text23 } from "ink";
+import Spinner13 from "ink-spinner";
 import { useEffect as useEffect11, useRef as useRef5, useState as useState11 } from "react";
-import { jsx as jsx26, jsxs as jsxs19 } from "react/jsx-runtime";
+import { jsx as jsx30, jsxs as jsxs21 } from "react/jsx-runtime";
 var TERMINAL_STATUSES = /* @__PURE__ */ new Set([
   "approved",
   "denied",
@@ -15334,121 +16198,121 @@ var RetrieveSpendRequest = ({
     };
   }, [phase, repository, id, include, timeout, onComplete]);
   if (phase === "fetching") {
-    return /* @__PURE__ */ jsx26(Box19, { children: /* @__PURE__ */ jsxs19(Text21, { color: "cyan", children: [
-      /* @__PURE__ */ jsx26(Spinner11, { type: "dots" }),
+    return /* @__PURE__ */ jsx30(Box21, { children: /* @__PURE__ */ jsxs21(Text23, { color: "cyan", children: [
+      /* @__PURE__ */ jsx30(Spinner13, { type: "dots" }),
       " Retrieving spend request ",
       id,
       "..."
     ] }) });
   }
   if (phase === "error") {
-    return /* @__PURE__ */ jsx26(Box19, { flexDirection: "column", children: /* @__PURE__ */ jsxs19(Text21, { color: "red", children: [
+    return /* @__PURE__ */ jsx30(Box21, { flexDirection: "column", children: /* @__PURE__ */ jsxs21(Text23, { color: "red", children: [
       "\u2717 ",
       error
     ] }) });
   }
   if (phase === "timeout") {
-    return /* @__PURE__ */ jsxs19(Box19, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsxs19(Text21, { color: "yellow", children: [
+    return /* @__PURE__ */ jsxs21(Box21, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsxs21(Text23, { color: "yellow", children: [
         "\u2717 Timed out waiting for approval after ",
         timeout,
         "s"
       ] }),
-      request && /* @__PURE__ */ jsxs19(Box19, { flexDirection: "column", marginTop: 1, paddingX: 2, children: [
-        /* @__PURE__ */ jsxs19(Text21, { children: [
+      request && /* @__PURE__ */ jsxs21(Box21, { flexDirection: "column", marginTop: 1, paddingX: 2, children: [
+        /* @__PURE__ */ jsxs21(Text23, { children: [
           "ID: ",
-          /* @__PURE__ */ jsx26(Text21, { bold: true, children: request.id })
+          /* @__PURE__ */ jsx30(Text23, { bold: true, children: request.id })
         ] }),
-        /* @__PURE__ */ jsxs19(Text21, { children: [
+        /* @__PURE__ */ jsxs21(Text23, { children: [
           "Status: ",
-          /* @__PURE__ */ jsx26(Text21, { bold: true, children: request.status })
+          /* @__PURE__ */ jsx30(Text23, { bold: true, children: request.status })
         ] })
       ] })
     ] });
   }
   if (phase === "polling") {
-    return /* @__PURE__ */ jsxs19(Box19, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsx26(Box19, { children: /* @__PURE__ */ jsxs19(Text21, { color: "cyan", children: [
-        /* @__PURE__ */ jsx26(Spinner11, { type: "dots" }),
+    return /* @__PURE__ */ jsxs21(Box21, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx30(Box21, { children: /* @__PURE__ */ jsxs21(Text23, { color: "cyan", children: [
+        /* @__PURE__ */ jsx30(Spinner13, { type: "dots" }),
         " Awaiting approval... (",
         elapsed,
         "s elapsed)"
       ] }) }),
-      request?.approval_url && /* @__PURE__ */ jsx26(Box19, { marginTop: 1, paddingX: 2, children: /* @__PURE__ */ jsxs19(Text21, { dimColor: true, children: [
+      request?.approval_url && /* @__PURE__ */ jsx30(Box21, { marginTop: 1, paddingX: 2, children: /* @__PURE__ */ jsxs21(Text23, { dimColor: true, children: [
         "Approval URL: ",
-        /* @__PURE__ */ jsx26(Text21, { color: "cyan", children: request.approval_url })
+        /* @__PURE__ */ jsx30(Text23, { color: "cyan", children: request.approval_url })
       ] }) })
     ] });
   }
   if (phase === "finalized") {
     const psd = request?.payment_status_details;
-    return /* @__PURE__ */ jsxs19(Box19, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsxs19(Text21, { color: "yellow", children: [
+    return /* @__PURE__ */ jsxs21(Box21, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsxs21(Text23, { color: "yellow", children: [
         "Spend request reached terminal status: ",
         request?.status
       ] }),
-      /* @__PURE__ */ jsxs19(Box19, { flexDirection: "column", marginTop: 1, paddingX: 2, children: [
-        /* @__PURE__ */ jsxs19(Text21, { children: [
+      /* @__PURE__ */ jsxs21(Box21, { flexDirection: "column", marginTop: 1, paddingX: 2, children: [
+        /* @__PURE__ */ jsxs21(Text23, { children: [
           "ID: ",
-          /* @__PURE__ */ jsx26(Text21, { bold: true, children: request?.id })
+          /* @__PURE__ */ jsx30(Text23, { bold: true, children: request?.id })
         ] }),
-        /* @__PURE__ */ jsxs19(Text21, { children: [
+        /* @__PURE__ */ jsxs21(Text23, { children: [
           "Status: ",
-          /* @__PURE__ */ jsx26(Text21, { bold: true, children: request?.status })
+          /* @__PURE__ */ jsx30(Text23, { bold: true, children: request?.status })
         ] }),
-        psd && /* @__PURE__ */ jsxs19(Box19, { flexDirection: "column", marginTop: 1, children: [
-          /* @__PURE__ */ jsx26(Text21, { bold: true, children: "Payment Details:" }),
-          /* @__PURE__ */ jsxs19(Text21, { children: [
+        psd && /* @__PURE__ */ jsxs21(Box21, { flexDirection: "column", marginTop: 1, children: [
+          /* @__PURE__ */ jsx30(Text23, { bold: true, children: "Payment Details:" }),
+          /* @__PURE__ */ jsxs21(Text23, { children: [
             "  ",
             "Outcome:",
             " ",
-            /* @__PURE__ */ jsx26(Text21, { bold: true, color: psd.outcome === "success" ? "green" : "red", children: psd.outcome })
+            /* @__PURE__ */ jsx30(Text23, { bold: true, color: psd.outcome === "success" ? "green" : "red", children: psd.outcome })
           ] }),
-          psd.code && /* @__PURE__ */ jsxs19(Text21, { children: [
+          psd.code && /* @__PURE__ */ jsxs21(Text23, { children: [
             "  ",
             "Code: ",
-            /* @__PURE__ */ jsx26(Text21, { bold: true, children: psd.code })
+            /* @__PURE__ */ jsx30(Text23, { bold: true, children: psd.code })
           ] }),
-          psd.decline_code && /* @__PURE__ */ jsxs19(Text21, { children: [
+          psd.decline_code && /* @__PURE__ */ jsxs21(Text23, { children: [
             "  ",
             "Decline Reason: ",
-            /* @__PURE__ */ jsx26(Text21, { bold: true, children: psd.decline_code })
+            /* @__PURE__ */ jsx30(Text23, { bold: true, children: psd.decline_code })
           ] }),
-          /* @__PURE__ */ jsxs19(Text21, { children: [
+          /* @__PURE__ */ jsxs21(Text23, { children: [
             "  ",
             "Amount:",
             " ",
-            /* @__PURE__ */ jsxs19(Text21, { bold: true, children: [
+            /* @__PURE__ */ jsxs21(Text23, { bold: true, children: [
               psd.amount,
               " ",
               psd.currency
             ] })
           ] }),
-          psd.created && /* @__PURE__ */ jsxs19(Text21, { children: [
+          psd.created && /* @__PURE__ */ jsxs21(Text23, { children: [
             "  ",
             "Charged At:",
             " ",
-            /* @__PURE__ */ jsx26(Text21, { bold: true, children: new Date(psd.created * 1e3).toISOString() })
+            /* @__PURE__ */ jsx30(Text23, { bold: true, children: new Date(psd.created * 1e3).toISOString() })
           ] }),
-          psd.refund_details && /* @__PURE__ */ jsxs19(Box19, { flexDirection: "column", marginTop: 1, children: [
-            /* @__PURE__ */ jsxs19(Text21, { bold: true, children: [
+          psd.refund_details && /* @__PURE__ */ jsxs21(Box21, { flexDirection: "column", marginTop: 1, children: [
+            /* @__PURE__ */ jsxs21(Text23, { bold: true, children: [
               "  ",
               "Refund:"
             ] }),
-            /* @__PURE__ */ jsxs19(Text21, { children: [
+            /* @__PURE__ */ jsxs21(Text23, { children: [
               "    ",
               "Amount:",
               " ",
-              /* @__PURE__ */ jsxs19(Text21, { bold: true, children: [
+              /* @__PURE__ */ jsxs21(Text23, { bold: true, children: [
                 psd.refund_details.amount,
                 " ",
                 psd.refund_details.currency
               ] })
             ] }),
-            /* @__PURE__ */ jsxs19(Text21, { children: [
+            /* @__PURE__ */ jsxs21(Text23, { children: [
               "    ",
               "State: ",
-              /* @__PURE__ */ jsx26(Text21, { bold: true, children: psd.refund_details.state })
+              /* @__PURE__ */ jsx30(Text23, { bold: true, children: psd.refund_details.state })
             ] })
           ] })
         ] })
@@ -15456,71 +16320,71 @@ var RetrieveSpendRequest = ({
     ] });
   }
   if (phase === "declined") {
-    return /* @__PURE__ */ jsxs19(Box19, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsx26(Text21, { color: "red", children: "\u2717 Spend request declined" }),
-      /* @__PURE__ */ jsxs19(Box19, { flexDirection: "column", marginTop: 1, paddingX: 2, children: [
-        /* @__PURE__ */ jsxs19(Text21, { children: [
+    return /* @__PURE__ */ jsxs21(Box21, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx30(Text23, { color: "red", children: "\u2717 Spend request declined" }),
+      /* @__PURE__ */ jsxs21(Box21, { flexDirection: "column", marginTop: 1, paddingX: 2, children: [
+        /* @__PURE__ */ jsxs21(Text23, { children: [
           "ID: ",
-          /* @__PURE__ */ jsx26(Text21, { bold: true, children: request?.id })
+          /* @__PURE__ */ jsx30(Text23, { bold: true, children: request?.id })
         ] }),
-        /* @__PURE__ */ jsxs19(Text21, { children: [
+        /* @__PURE__ */ jsxs21(Text23, { children: [
           "Status:",
           " ",
-          /* @__PURE__ */ jsx26(Text21, { bold: true, color: "red", children: request?.status })
+          /* @__PURE__ */ jsx30(Text23, { bold: true, color: "red", children: request?.status })
         ] }),
-        /* @__PURE__ */ jsxs19(Text21, { children: [
+        /* @__PURE__ */ jsxs21(Text23, { children: [
           "Amount:",
           " ",
-          /* @__PURE__ */ jsx26(Text21, { bold: true, children: request?.amount != null ? String(request.amount) : "N/A" })
+          /* @__PURE__ */ jsx30(Text23, { bold: true, children: request?.amount != null ? String(request.amount) : "N/A" })
         ] }),
-        /* @__PURE__ */ jsxs19(Text21, { children: [
+        /* @__PURE__ */ jsxs21(Text23, { children: [
           "Merchant: ",
-          /* @__PURE__ */ jsx26(Text21, { bold: true, children: request?.merchant_name })
+          /* @__PURE__ */ jsx30(Text23, { bold: true, children: request?.merchant_name })
         ] })
       ] })
     ] });
   }
-  return /* @__PURE__ */ jsxs19(Box19, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsx26(Text21, { color: "green", children: "\u2713 Spend request approved" }),
-    /* @__PURE__ */ jsxs19(Box19, { flexDirection: "column", marginTop: 1, paddingX: 2, children: [
-      /* @__PURE__ */ jsxs19(Text21, { children: [
+  return /* @__PURE__ */ jsxs21(Box21, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx30(Text23, { color: "green", children: "\u2713 Spend request approved" }),
+    /* @__PURE__ */ jsxs21(Box21, { flexDirection: "column", marginTop: 1, paddingX: 2, children: [
+      /* @__PURE__ */ jsxs21(Text23, { children: [
         "ID: ",
-        /* @__PURE__ */ jsx26(Text21, { bold: true, children: request?.id })
+        /* @__PURE__ */ jsx30(Text23, { bold: true, children: request?.id })
       ] }),
-      /* @__PURE__ */ jsxs19(Text21, { children: [
+      /* @__PURE__ */ jsxs21(Text23, { children: [
         "Status:",
         " ",
-        /* @__PURE__ */ jsx26(Text21, { bold: true, color: "green", children: request?.status })
+        /* @__PURE__ */ jsx30(Text23, { bold: true, color: "green", children: request?.status })
       ] }),
-      /* @__PURE__ */ jsxs19(Text21, { children: [
+      /* @__PURE__ */ jsxs21(Text23, { children: [
         "Amount:",
         " ",
-        /* @__PURE__ */ jsx26(Text21, { bold: true, children: request?.amount != null ? String(request.amount) : "N/A" })
+        /* @__PURE__ */ jsx30(Text23, { bold: true, children: request?.amount != null ? String(request.amount) : "N/A" })
       ] }),
-      /* @__PURE__ */ jsxs19(Text21, { children: [
+      /* @__PURE__ */ jsxs21(Text23, { children: [
         "Merchant: ",
-        /* @__PURE__ */ jsx26(Text21, { bold: true, children: request?.merchant_name })
+        /* @__PURE__ */ jsx30(Text23, { bold: true, children: request?.merchant_name })
       ] }),
-      /* @__PURE__ */ jsxs19(Text21, { children: [
+      /* @__PURE__ */ jsxs21(Text23, { children: [
         "Line Items:",
         " ",
-        /* @__PURE__ */ jsx26(Text21, { bold: true, children: request?.line_items.map((li) => li.name).join(", ") })
+        /* @__PURE__ */ jsx30(Text23, { bold: true, children: request?.line_items.map((li) => li.name).join(", ") })
       ] }),
-      request?.link_pay_token && /* @__PURE__ */ jsxs19(Box19, { flexDirection: "column", marginTop: 1, children: [
-        /* @__PURE__ */ jsx26(Text21, { bold: true, children: "Link Pay Token:" }),
-        /* @__PURE__ */ jsxs19(Text21, { children: [
+      request?.link_pay_token && /* @__PURE__ */ jsxs21(Box21, { flexDirection: "column", marginTop: 1, children: [
+        /* @__PURE__ */ jsx30(Text23, { bold: true, children: "Link Pay Token:" }),
+        /* @__PURE__ */ jsxs21(Text23, { children: [
           " ",
-          /* @__PURE__ */ jsx26(Text21, { bold: true, children: request.link_pay_token })
+          /* @__PURE__ */ jsx30(Text23, { bold: true, children: request.link_pay_token })
         ] })
       ] }),
-      request?.payment_status_details && /* @__PURE__ */ jsxs19(Box19, { flexDirection: "column", marginTop: 1, children: [
-        /* @__PURE__ */ jsx26(Text21, { bold: true, children: "Last Payment Attempt:" }),
-        /* @__PURE__ */ jsxs19(Text21, { children: [
+      request?.payment_status_details && /* @__PURE__ */ jsxs21(Box21, { flexDirection: "column", marginTop: 1, children: [
+        /* @__PURE__ */ jsx30(Text23, { bold: true, children: "Last Payment Attempt:" }),
+        /* @__PURE__ */ jsxs21(Text23, { children: [
           "  ",
           "Outcome:",
           " ",
-          /* @__PURE__ */ jsx26(
-            Text21,
+          /* @__PURE__ */ jsx30(
+            Text23,
             {
               bold: true,
               color: request.payment_status_details.outcome === "success" ? "green" : "red",
@@ -15528,79 +16392,79 @@ var RetrieveSpendRequest = ({
             }
           )
         ] }),
-        request.payment_status_details.code && /* @__PURE__ */ jsxs19(Text21, { children: [
+        request.payment_status_details.code && /* @__PURE__ */ jsxs21(Text23, { children: [
           "  ",
           "Code:",
           " ",
-          /* @__PURE__ */ jsx26(Text21, { bold: true, children: request.payment_status_details.code })
+          /* @__PURE__ */ jsx30(Text23, { bold: true, children: request.payment_status_details.code })
         ] }),
-        request.payment_status_details.decline_code && /* @__PURE__ */ jsxs19(Text21, { children: [
+        request.payment_status_details.decline_code && /* @__PURE__ */ jsxs21(Text23, { children: [
           "  ",
           "Decline Reason:",
           " ",
-          /* @__PURE__ */ jsx26(Text21, { bold: true, children: request.payment_status_details.decline_code })
+          /* @__PURE__ */ jsx30(Text23, { bold: true, children: request.payment_status_details.decline_code })
         ] })
       ] }),
-      request?.shared_payment_token && /* @__PURE__ */ jsxs19(Box19, { flexDirection: "column", marginTop: 1, children: [
-        /* @__PURE__ */ jsxs19(Text21, { bold: true, children: [
+      request?.shared_payment_token && /* @__PURE__ */ jsxs21(Box21, { flexDirection: "column", marginTop: 1, children: [
+        /* @__PURE__ */ jsxs21(Text23, { bold: true, children: [
           "\x1B]8;;https://docs.stripe.com/agentic-commerce/concepts/shared-payment-tokens\x07",
           "Shared Payment Token",
           "\x1B]8;;\x07",
           ":"
         ] }),
-        /* @__PURE__ */ jsxs19(Text21, { children: [
+        /* @__PURE__ */ jsxs21(Text23, { children: [
           " ",
           "Token: ",
-          /* @__PURE__ */ jsx26(Text21, { bold: true, children: request.shared_payment_token.id })
+          /* @__PURE__ */ jsx30(Text23, { bold: true, children: request.shared_payment_token.id })
         ] })
       ] }),
-      request?.card && !outputFile && /* @__PURE__ */ jsxs19(Box19, { flexDirection: "column", marginTop: 1, children: [
-        /* @__PURE__ */ jsx26(Text21, { bold: true, children: "Card Details:" }),
-        /* @__PURE__ */ jsxs19(Text21, { children: [
+      request?.card && !outputFile && /* @__PURE__ */ jsxs21(Box21, { flexDirection: "column", marginTop: 1, children: [
+        /* @__PURE__ */ jsx30(Text23, { bold: true, children: "Card Details:" }),
+        /* @__PURE__ */ jsxs21(Text23, { children: [
           " ",
           "Number: ",
-          /* @__PURE__ */ jsx26(Text21, { bold: true, children: request?.card.number })
+          /* @__PURE__ */ jsx30(Text23, { bold: true, children: request?.card.number })
         ] }),
-        /* @__PURE__ */ jsxs19(Text21, { children: [
+        /* @__PURE__ */ jsxs21(Text23, { children: [
           " ",
           "Brand: ",
-          /* @__PURE__ */ jsx26(Text21, { bold: true, children: request?.card.brand })
+          /* @__PURE__ */ jsx30(Text23, { bold: true, children: request?.card.brand })
         ] }),
-        /* @__PURE__ */ jsxs19(Text21, { children: [
+        /* @__PURE__ */ jsxs21(Text23, { children: [
           " ",
           "Expiry:",
           " ",
-          /* @__PURE__ */ jsxs19(Text21, { bold: true, children: [
+          /* @__PURE__ */ jsxs21(Text23, { bold: true, children: [
             String(request?.card.exp_month).padStart(2, "0"),
             "/",
             request?.card.exp_year
           ] })
         ] }),
-        request?.card.cvc && /* @__PURE__ */ jsxs19(Text21, { children: [
+        request?.card.cvc && /* @__PURE__ */ jsxs21(Text23, { children: [
           " ",
           "CVC: ",
-          /* @__PURE__ */ jsx26(Text21, { bold: true, children: request.card.cvc })
+          /* @__PURE__ */ jsx30(Text23, { bold: true, children: request.card.cvc })
         ] }),
-        request?.card.valid_until && /* @__PURE__ */ jsxs19(Text21, { children: [
+        request?.card.valid_until && /* @__PURE__ */ jsxs21(Text23, { children: [
           " ",
           "Valid Until: ",
-          /* @__PURE__ */ jsx26(Text21, { bold: true, children: request.card.valid_until })
+          /* @__PURE__ */ jsx30(Text23, { bold: true, children: request.card.valid_until })
         ] }),
-        request?.card.billing_address && /* @__PURE__ */ jsxs19(Box19, { flexDirection: "column", marginTop: 1, children: [
-          /* @__PURE__ */ jsx26(Text21, { bold: true, children: " Billing Address:" }),
-          /* @__PURE__ */ jsxs19(Text21, { children: [
+        request?.card.billing_address && /* @__PURE__ */ jsxs21(Box21, { flexDirection: "column", marginTop: 1, children: [
+          /* @__PURE__ */ jsx30(Text23, { bold: true, children: " Billing Address:" }),
+          /* @__PURE__ */ jsxs21(Text23, { children: [
             "  ",
             request.card.billing_address.name
           ] }),
-          /* @__PURE__ */ jsxs19(Text21, { children: [
+          /* @__PURE__ */ jsxs21(Text23, { children: [
             "  ",
             request.card.billing_address.line1
           ] }),
-          request.card.billing_address.line2 && /* @__PURE__ */ jsxs19(Text21, { children: [
+          request.card.billing_address.line2 && /* @__PURE__ */ jsxs21(Text23, { children: [
             "  ",
             request.card.billing_address.line2
           ] }),
-          /* @__PURE__ */ jsxs19(Text21, { children: [
+          /* @__PURE__ */ jsxs21(Text23, { children: [
             "  ",
             [
               request.card.billing_address.city,
@@ -15608,18 +16472,18 @@ var RetrieveSpendRequest = ({
               request.card.billing_address.postal_code
             ].filter(Boolean).join(", ")
           ] }),
-          /* @__PURE__ */ jsxs19(Text21, { children: [
+          /* @__PURE__ */ jsxs21(Text23, { children: [
             "  ",
             request.card.billing_address.country
           ] })
         ] })
       ] }),
-      request?.card && outputFile && /* @__PURE__ */ jsxs19(Box19, { flexDirection: "column", marginTop: 1, children: [
-        outputFilePath && /* @__PURE__ */ jsxs19(Text21, { color: "green", children: [
+      request?.card && outputFile && /* @__PURE__ */ jsxs21(Box21, { flexDirection: "column", marginTop: 1, children: [
+        outputFilePath && /* @__PURE__ */ jsxs21(Text23, { color: "green", children: [
           "Card credentials written to ",
-          /* @__PURE__ */ jsx26(Text21, { bold: true, children: outputFilePath })
+          /* @__PURE__ */ jsx30(Text23, { bold: true, children: outputFilePath })
         ] }),
-        fileError && /* @__PURE__ */ jsxs19(Text21, { color: "red", children: [
+        fileError && /* @__PURE__ */ jsxs21(Text23, { color: "red", children: [
           "Failed to write card file: ",
           fileError
         ] })
@@ -15629,140 +16493,143 @@ var RetrieveSpendRequest = ({
 };
 
 // src/commands/spend-request/schema.ts
-import { z as z8 } from "incur";
-var createOptions = z8.object({
-  paymentMethodId: z8.string().optional().describe("Payment method ID"),
-  credentialType: z8.enum(["shared_payment_token", "card"]).default("card").describe(
+import { z as z10 } from "incur";
+var createOptions = z10.object({
+  paymentMethodId: z10.string().optional().describe("Payment method ID"),
+  credentialType: z10.enum(["shared_payment_token", "card"]).default("card").describe(
     '"card" for checkout forms/Stripe Elements; "shared_payment_token" for HTTP 402/machine payment flows'
   ),
-  networkId: z8.string().optional().describe(
+  networkId: z10.string().optional().describe(
     "Network ID (required for shared_payment_token) \u2014 use `link-cli mpp decode` to extract"
   ),
-  amount: z8.coerce.number().int().positive().max(5e5).describe("Amount in cents, max 500000 ($5,000.00)"),
-  currency: z8.string().length(3).default("usd").describe("Currency code"),
-  merchantName: z8.string().optional().describe(
+  amount: z10.coerce.number().int().positive().max(5e5).describe("Amount in cents, max 500000 ($5,000.00)"),
+  currency: z10.string().length(3).default("usd").describe("Currency code"),
+  merchantName: z10.string().optional().describe(
     "Merchant name (required for card; forbidden for shared_payment_token)"
   ),
-  merchantUrl: z8.string().optional().describe(
+  merchantUrl: z10.string().optional().describe(
     "Merchant URL (required for card; forbidden for shared_payment_token)"
   ),
-  context: z8.string().min(100).describe(
+  context: z10.string().min(100).describe(
     "Min 100 chars \u2014 describe the purchase and rationale; the user reads this when approving"
   ),
-  lineItem: z8.array(z8.union([z8.string(), z8.record(z8.string(), z8.unknown())])).default([]).describe(
+  lineItem: z10.array(z10.union([z10.string(), z10.record(z10.string(), z10.unknown())])).default([]).describe(
     'Line item (repeatable, key:value format). Keys: name (required), quantity, unit_amount, description, sku, url, image_url, product_url. Example: "name:Shoes,unit_amount:5000,quantity:2"'
   ),
-  total: z8.array(z8.union([z8.string(), z8.record(z8.string(), z8.unknown())])).default([]).describe(
+  total: z10.array(z10.union([z10.string(), z10.record(z10.string(), z10.unknown())])).default([]).describe(
     'Total (repeatable, key:value format). Keys: type (required; one of: subtotal, tax, total, items_base_amount, items_discount, discount, fulfillment, shipping, fee, gift_wrap, tip, store_credit), display_text (required), amount (required). Example: "type:total,display_text:Total,amount:5000"'
   ),
-  requestApproval: z8.boolean().default(true).describe("Request approval and poll until approved/denied/expired"),
-  test: z8.boolean().default(false).describe(
+  requestApproval: z10.boolean().default(true).describe("Request approval and poll until approved/denied/expired"),
+  test: z10.boolean().default(false).describe(
     "Use test mode (creates testmode credentials from test card data)"
   ),
-  approve: z8.boolean().default(false).describe(""),
-  outputFile: z8.string().optional().describe(
+  approve: z10.boolean().default(false).describe(""),
+  outputFile: z10.string().optional().describe(
     "Write full card credentials to this file path; stdout shows redacted card data only"
   ),
-  force: z8.boolean().default(false).describe("Overwrite output file if it already exists")
+  force: z10.boolean().default(false).describe("Overwrite output file if it already exists"),
+  approvalDetail: z10.union([z10.string(), z10.record(z10.string(), z10.unknown())]).optional().describe(
+    "Approval details object (MCP/agent: pass as object; CLI: pass as JSON string). Required fields: approved_at (unix timestamp), approval_method (click|programmatic|voice), app_name, external_user_id. Optional: ip_address, user_agent, device_type (mobile|web), agent_log_id, external_user_name, external_session_id, authentication_method (biometric_face|biometric_fingerprint|passkey)."
+  )
 });
-var listOptions = z8.object({
-  includeHistory: z8.boolean().default(false).describe("Include expired and terminal spend requests")
+var listOptions3 = z10.object({
+  includeHistory: z10.boolean().default(false).describe("Include expired and terminal spend requests")
 });
-var retrieveOptions = z8.object({
-  timeout: z8.coerce.number().default(600).describe(
+var retrieveOptions = z10.object({
+  timeout: z10.coerce.number().default(600).describe(
     "Polling timeout in seconds. When reached during active polling, exits non-zero with POLLING_TIMEOUT. Default exceeds the server-side spend-request expiry so polling outlives the request itself."
   ),
-  interval: z8.coerce.number().default(0).describe(
+  interval: z10.coerce.number().default(0).describe(
     "Poll interval in seconds. When > 0, polls until status is terminal, timeout is reached, or max attempts are exhausted."
   ),
-  maxAttempts: z8.coerce.number().default(0).describe(
+  maxAttempts: z10.coerce.number().default(0).describe(
     "Max poll attempts. 0 = unlimited. Exhaustion during active polling exits non-zero with POLLING_TIMEOUT."
   ),
-  include: z8.array(z8.string()).default([]).describe("Include extra data (repeatable, e.g. --include card)"),
-  outputFile: z8.string().optional().describe(
+  include: z10.array(z10.string()).default([]).describe("Include extra data (repeatable, e.g. --include card)"),
+  outputFile: z10.string().optional().describe(
     "Write full card credentials to this file path; stdout shows redacted card data only"
   ),
-  force: z8.boolean().default(false).describe("Overwrite output file if it already exists")
+  force: z10.boolean().default(false).describe("Overwrite output file if it already exists")
 });
-var updateOptions = z8.object({
-  paymentMethodId: z8.string().optional().describe("Payment method ID"),
-  amount: z8.coerce.number().optional().describe("Amount in cents"),
-  merchantUrl: z8.string().optional().describe("Merchant URL"),
-  profileId: z8.string().optional().describe("Profile ID"),
-  merchantId: z8.string().optional().describe("Merchant ID"),
-  currency: z8.string().optional().describe("Currency code"),
-  lineItem: z8.array(z8.union([z8.string(), z8.record(z8.string(), z8.unknown())])).default([]).describe(
+var updateOptions = z10.object({
+  paymentMethodId: z10.string().optional().describe("Payment method ID"),
+  amount: z10.coerce.number().optional().describe("Amount in cents"),
+  merchantUrl: z10.string().optional().describe("Merchant URL"),
+  profileId: z10.string().optional().describe("Profile ID"),
+  merchantId: z10.string().optional().describe("Merchant ID"),
+  currency: z10.string().optional().describe("Currency code"),
+  lineItem: z10.array(z10.union([z10.string(), z10.record(z10.string(), z10.unknown())])).default([]).describe(
     'Line item (repeatable, key:value format). Keys: name (required), quantity, unit_amount, description, sku, url, image_url, product_url. Example: "name:Shoes,unit_amount:5000,quantity:2"'
   ),
-  total: z8.array(z8.union([z8.string(), z8.record(z8.string(), z8.unknown())])).default([]).describe(
+  total: z10.array(z10.union([z10.string(), z10.record(z10.string(), z10.unknown())])).default([]).describe(
     'Total (repeatable, key:value format). Keys: type (required; one of: subtotal, tax, total, items_base_amount, items_discount, discount, fulfillment, shipping, fee, gift_wrap, tip, store_credit), display_text (required), amount (required). Example: "type:total,display_text:Total,amount:5000"'
   )
 });
 
 // src/commands/spend-request/update.tsx
-import { Box as Box20, Text as Text22 } from "ink";
-import Spinner12 from "ink-spinner";
-import { useCallback as useCallback9 } from "react";
-import { jsx as jsx27, jsxs as jsxs20 } from "react/jsx-runtime";
+import { Box as Box22, Text as Text24 } from "ink";
+import Spinner14 from "ink-spinner";
+import { useCallback as useCallback11 } from "react";
+import { jsx as jsx31, jsxs as jsxs22 } from "react/jsx-runtime";
 var UpdateSpendRequest = ({
   repository,
   id,
   params,
   onComplete
 }) => {
-  const action = useCallback9(
+  const action = useCallback11(
     () => repository.updateSpendRequest(id, params),
     [repository, id, params]
   );
   const { status, data: request, error } = useAsyncAction(action, onComplete);
   if (status === "loading") {
-    return /* @__PURE__ */ jsx27(Box20, { children: /* @__PURE__ */ jsxs20(Text22, { color: "cyan", children: [
-      /* @__PURE__ */ jsx27(Spinner12, { type: "dots" }),
+    return /* @__PURE__ */ jsx31(Box22, { children: /* @__PURE__ */ jsxs22(Text24, { color: "cyan", children: [
+      /* @__PURE__ */ jsx31(Spinner14, { type: "dots" }),
       " Updating spend request ",
       id,
       "..."
     ] }) });
   }
   if (status === "error") {
-    return /* @__PURE__ */ jsxs20(Box20, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsx27(Text22, { color: "red", children: "\u2717 Failed to update spend request" }),
-      /* @__PURE__ */ jsx27(Text22, { color: "red", children: error })
+    return /* @__PURE__ */ jsxs22(Box22, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx31(Text24, { color: "red", children: "\u2717 Failed to update spend request" }),
+      /* @__PURE__ */ jsx31(Text24, { color: "red", children: error })
     ] });
   }
-  return /* @__PURE__ */ jsxs20(Box20, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsx27(Text22, { color: "green", children: "\u2713 Spend request updated" }),
-    /* @__PURE__ */ jsxs20(Box20, { flexDirection: "column", marginTop: 1, paddingX: 2, children: [
-      /* @__PURE__ */ jsxs20(Text22, { children: [
+  return /* @__PURE__ */ jsxs22(Box22, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx31(Text24, { color: "green", children: "\u2713 Spend request updated" }),
+    /* @__PURE__ */ jsxs22(Box22, { flexDirection: "column", marginTop: 1, paddingX: 2, children: [
+      /* @__PURE__ */ jsxs22(Text24, { children: [
         "ID: ",
-        /* @__PURE__ */ jsx27(Text22, { bold: true, children: request?.id })
+        /* @__PURE__ */ jsx31(Text24, { bold: true, children: request?.id })
       ] }),
-      /* @__PURE__ */ jsxs20(Text22, { children: [
+      /* @__PURE__ */ jsxs22(Text24, { children: [
         "Status: ",
-        /* @__PURE__ */ jsx27(Text22, { bold: true, children: request?.status })
+        /* @__PURE__ */ jsx31(Text24, { bold: true, children: request?.status })
       ] }),
-      /* @__PURE__ */ jsxs20(Text22, { children: [
+      /* @__PURE__ */ jsxs22(Text24, { children: [
         "Amount:",
         " ",
-        /* @__PURE__ */ jsx27(Text22, { bold: true, children: (() => {
+        /* @__PURE__ */ jsx31(Text24, { bold: true, children: (() => {
           const t = request?.totals.find((t2) => t2.type === "total");
           return t ? String(t.amount) : "N/A";
         })() })
       ] }),
-      /* @__PURE__ */ jsxs20(Text22, { children: [
+      /* @__PURE__ */ jsxs22(Text24, { children: [
         "Merchant: ",
-        /* @__PURE__ */ jsx27(Text22, { bold: true, children: request?.merchant_name })
+        /* @__PURE__ */ jsx31(Text24, { bold: true, children: request?.merchant_name })
       ] }),
-      /* @__PURE__ */ jsxs20(Text22, { children: [
+      /* @__PURE__ */ jsxs22(Text24, { children: [
         "Line Items:",
         " ",
-        /* @__PURE__ */ jsx27(Text22, { bold: true, children: request?.line_items.map((li) => li.name).join(", ") })
+        /* @__PURE__ */ jsx31(Text24, { bold: true, children: request?.line_items.map((li) => li.name).join(", ") })
       ] })
     ] })
   ] });
 };
 
 // src/commands/spend-request/index.tsx
-import { jsx as jsx28 } from "react/jsx-runtime";
+import { jsx as jsx32 } from "react/jsx-runtime";
 async function applyOutputFile(request, outputFile, force) {
   if (!outputFile || !request.card) return request;
   const fileData = {
@@ -15781,19 +16648,19 @@ async function applyOutputFile(request, outputFile, force) {
   };
 }
 function createSpendRequestCli(repository, authStorage2, envAccessToken2) {
-  const cli2 = Cli9.create("spend-request", {
+  const cli2 = Cli11.create("spend-request", {
     description: "Spend request management commands"
   });
   cli2.command("list", {
     description: "List spend requests. By default returns only active requests (created, pending_approval, approved). Use --include-history to return all spend requests including expired and terminal states.",
     outputPolicy: "agent-only",
-    options: listOptions,
+    options: listOptions3,
     middleware: [requireAuth(authStorage2, envAccessToken2)],
     async run(c) {
       const opts = { includeHistory: c.options.includeHistory ?? false };
       if (!c.agent && !c.formatExplicit) {
         return renderInteractive(
-          /* @__PURE__ */ jsx28(
+          /* @__PURE__ */ jsx32(
             SpendRequestList,
             {
               repository,
@@ -15857,6 +16724,7 @@ function createSpendRequestCli(repository, authStorage2, envAccessToken2) {
       const totals = opts.total?.length ? opts.total.map(
         (item) => typeof item === "string" ? parseTotalFlag(item) : item
       ) : void 0;
+      const approvalDetails = opts.approvalDetail !== void 0 ? typeof opts.approvalDetail === "string" ? JSON.parse(opts.approvalDetail) : opts.approvalDetail : void 0;
       const createParams = {
         payment_details: opts.paymentMethodId,
         credential_type: credentialType,
@@ -15870,14 +16738,15 @@ function createSpendRequestCli(repository, authStorage2, envAccessToken2) {
         totals,
         request_approval: requestApproval || void 0,
         test: opts.test ? true : void 0,
-        approve: opts.approve ? true : void 0
+        approve: opts.approve ? true : void 0,
+        approval_details: approvalDetails
       };
       const outputFile = opts.outputFile;
       const forceOverwrite = opts.force;
       if (!c.agent && !c.formatExplicit) {
-        let capturedResult = null;
+        let capturedResult = void 0;
         return renderInteractive(
-          /* @__PURE__ */ jsx28(
+          /* @__PURE__ */ jsx32(
             CreateSpendRequest,
             {
               repository,
@@ -15891,13 +16760,28 @@ function createSpendRequestCli(repository, authStorage2, envAccessToken2) {
             }
           ),
           () => {
-            if (!capturedResult)
+            if (capturedResult === void 0)
               throw new Error("Component exited without producing a result");
+            if (capturedResult === null) process.exit(1);
             return capturedResult;
           }
         );
       }
-      const created = await repository.createSpendRequest(createParams);
+      let created;
+      try {
+        created = await repository.createSpendRequest(createParams);
+      } catch (err) {
+        if (err instanceof LinkApiError) {
+          const apiErr = err.details;
+          if (apiErr?.error?.verification_url) {
+            return c.error({
+              code: err.code,
+              message: `${err.message} Verification URL: ${apiErr.error.verification_url}`
+            });
+          }
+        }
+        throw err;
+      }
       if (!requestApproval) {
         try {
           yield await applyOutputFile(created, outputFile, forceOverwrite);
@@ -15922,8 +16806,8 @@ function createSpendRequestCli(repository, authStorage2, envAccessToken2) {
   });
   cli2.command("update", {
     description: "Update a spend request",
-    args: z9.object({
-      id: z9.string().describe("Spend request ID")
+    args: z11.object({
+      id: z11.string().describe("Spend request ID")
     }),
     options: updateOptions,
     outputPolicy: "agent-only",
@@ -15951,7 +16835,7 @@ function createSpendRequestCli(repository, authStorage2, envAccessToken2) {
       if (!c.agent && !c.formatExplicit) {
         let capturedResult = null;
         return renderInteractive(
-          /* @__PURE__ */ jsx28(
+          /* @__PURE__ */ jsx32(
             UpdateSpendRequest,
             {
               repository,
@@ -15974,17 +16858,17 @@ function createSpendRequestCli(repository, authStorage2, envAccessToken2) {
   });
   cli2.command("request-approval", {
     description: "Request approval for a spend request",
-    args: z9.object({
-      id: z9.string().describe("Spend request ID")
+    args: z11.object({
+      id: z11.string().describe("Spend request ID")
     }),
     outputPolicy: "agent-only",
     async *run(c) {
       requireAuthGuard(c, authStorage2, envAccessToken2);
       const id = c.args.id;
       if (!c.agent && !c.formatExplicit) {
-        let capturedResult = null;
+        let capturedResult = void 0;
         return renderInteractive(
-          /* @__PURE__ */ jsx28(
+          /* @__PURE__ */ jsx32(
             RequestApproval,
             {
               repository,
@@ -15995,13 +16879,28 @@ function createSpendRequestCli(repository, authStorage2, envAccessToken2) {
             }
           ),
           () => {
-            if (!capturedResult)
+            if (capturedResult === void 0)
               throw new Error("Component exited without producing a result");
+            if (capturedResult === null) process.exit(1);
             return capturedResult;
           }
         );
       }
-      const approval = await repository.requestApproval(id);
+      let approval;
+      try {
+        approval = await repository.requestApproval(id);
+      } catch (err) {
+        if (err instanceof LinkApiError) {
+          const apiErr = err.details;
+          if (apiErr?.error?.verification_url) {
+            return c.error({
+              code: err.code,
+              message: `${err.message} Verification URL: ${apiErr.error.verification_url}`
+            });
+          }
+        }
+        throw err;
+      }
       yield {
         ...approval,
         instruction: `Present the approval_url to the user and ask them to approve in the Link app. Then call \`spend-request retrieve ${id} --interval 2 --max-attempts 300\` to poll until approved. Do not wait for the user to reply \u2014 start polling immediately.`,
@@ -16014,8 +16913,8 @@ function createSpendRequestCli(repository, authStorage2, envAccessToken2) {
   });
   cli2.command("retrieve", {
     description: "Retrieve a spend request",
-    args: z9.object({
-      id: z9.string().describe("Spend request ID")
+    args: z11.object({
+      id: z11.string().describe("Spend request ID")
     }),
     options: retrieveOptions,
     outputPolicy: "agent-only",
@@ -16033,7 +16932,7 @@ function createSpendRequestCli(repository, authStorage2, envAccessToken2) {
       if (!c.agent && !c.formatExplicit) {
         let capturedResult = null;
         return renderInteractive(
-          /* @__PURE__ */ jsx28(
+          /* @__PURE__ */ jsx32(
             RetrieveSpendRequest,
             {
               repository,
@@ -16105,8 +17004,8 @@ function createSpendRequestCli(repository, authStorage2, envAccessToken2) {
   });
   cli2.command("cancel", {
     description: "Cancel a spend request",
-    args: z9.object({
-      id: z9.string().describe("Spend request ID")
+    args: z11.object({
+      id: z11.string().describe("Spend request ID")
     }),
     outputPolicy: "agent-only",
     middleware: [requireAuth(authStorage2, envAccessToken2)],
@@ -16115,7 +17014,7 @@ function createSpendRequestCli(repository, authStorage2, envAccessToken2) {
       if (!c.agent && !c.formatExplicit) {
         let capturedResult = null;
         return renderInteractive(
-          /* @__PURE__ */ jsx28(
+          /* @__PURE__ */ jsx32(
             CancelSpendRequest,
             {
               repository,
@@ -16138,55 +17037,221 @@ function createSpendRequestCli(repository, authStorage2, envAccessToken2) {
   return cli2;
 }
 
+// src/commands/transactions/index.tsx
+import { Cli as Cli12 } from "incur";
+
+// src/commands/transactions/list.tsx
+import { Box as Box23, Text as Text25 } from "ink";
+import Spinner15 from "ink-spinner";
+import { useCallback as useCallback12 } from "react";
+import { jsx as jsx33, jsxs as jsxs23 } from "react/jsx-runtime";
+var COLUMN_GAP3 = "  ";
+var DATE_WIDTH = 10;
+var AMOUNT_WIDTH = 13;
+var STATUS_WIDTH = 10;
+var CATEGORY_WIDTH = 16;
+var MIN_DESCRIPTION_WIDTH = 16;
+var HORIZONTAL_PADDING2 = 4;
+function formatAmount(amount, currency) {
+  const currencyCode = currency.toUpperCase();
+  try {
+    const formatter = new Intl.NumberFormat("en-US", {
+      style: "currency",
+      currency: currencyCode
+    });
+    const fractionDigits = formatter.resolvedOptions().maximumFractionDigits ?? 2;
+    return formatter.format(amount / 10 ** fractionDigits);
+  } catch {
+    return `${amount} ${currency}`;
+  }
+}
+function truncateCell3(value, width) {
+  if (value.length <= width) {
+    return value;
+  }
+  if (width <= 3) {
+    return value.slice(0, width);
+  }
+  return `${value.slice(0, width - 3)}...`;
+}
+function formatCell3(value, width, align = "left") {
+  const truncated = truncateCell3(value, width);
+  return align === "right" ? truncated.padStart(width) : truncated.padEnd(width);
+}
+var TransactionsList = ({
+  resource,
+  params,
+  onComplete
+}) => {
+  const action = useCallback12(
+    () => resource.listTransactions(params),
+    [resource, params]
+  );
+  const { status, data: page, error } = useAsyncAction(action, onComplete);
+  const transactions = page?.data ?? [];
+  const nextCursor = page?.has_more && transactions.length > 0 ? transactions[transactions.length - 1].id : null;
+  const terminalWidth = process.stdout.columns ?? 100;
+  const descriptionWidth = Math.max(
+    MIN_DESCRIPTION_WIDTH,
+    terminalWidth - HORIZONTAL_PADDING2 - DATE_WIDTH - AMOUNT_WIDTH - STATUS_WIDTH - CATEGORY_WIDTH - COLUMN_GAP3.length * 4
+  );
+  const headerRow = [
+    formatCell3("Date", DATE_WIDTH),
+    formatCell3("Amount", AMOUNT_WIDTH, "right"),
+    formatCell3("Status", STATUS_WIDTH),
+    formatCell3("Category", CATEGORY_WIDTH),
+    formatCell3("Description", descriptionWidth)
+  ].join(COLUMN_GAP3);
+  const separatorRow = "-".repeat(headerRow.length);
+  const rows = transactions.map(
+    (txn) => [
+      formatCell3(txn.created_date, DATE_WIDTH),
+      formatCell3(formatAmount(txn.amount, txn.currency), AMOUNT_WIDTH, "right"),
+      formatCell3(txn.status, STATUS_WIDTH),
+      formatCell3(txn.category ?? "", CATEGORY_WIDTH),
+      formatCell3(txn.description, descriptionWidth)
+    ].join(COLUMN_GAP3)
+  );
+  if (status === "loading") {
+    return /* @__PURE__ */ jsx33(Box23, { children: /* @__PURE__ */ jsxs23(Text25, { color: "cyan", children: [
+      /* @__PURE__ */ jsx33(Spinner15, { type: "dots" }),
+      " Loading transactions..."
+    ] }) });
+  }
+  if (status === "error") {
+    return /* @__PURE__ */ jsxs23(Box23, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx33(Text25, { color: "red", children: "Failed to load transactions" }),
+      /* @__PURE__ */ jsx33(Text25, { color: "red", children: error })
+    ] });
+  }
+  if (transactions.length === 0) {
+    return /* @__PURE__ */ jsx33(Box23, { children: /* @__PURE__ */ jsx33(Text25, { dimColor: true, children: "No transactions found" }) });
+  }
+  return /* @__PURE__ */ jsxs23(Box23, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx33(Text25, { bold: true, children: "Transactions" }),
+    /* @__PURE__ */ jsxs23(Box23, { flexDirection: "column", marginTop: 1, paddingX: 2, children: [
+      /* @__PURE__ */ jsx33(Text25, { bold: true, children: headerRow }),
+      /* @__PURE__ */ jsx33(Text25, { dimColor: true, children: separatorRow }),
+      rows.map((row, index) => /* @__PURE__ */ jsx33(Text25, { children: row }, transactions[index].id))
+    ] }),
+    page?.has_more !== void 0 ? /* @__PURE__ */ jsxs23(Box23, { flexDirection: "column", marginTop: 1, children: [
+      /* @__PURE__ */ jsxs23(Text25, { dimColor: true, children: [
+        "has_more: ",
+        String(page.has_more)
+      ] }),
+      nextCursor ? /* @__PURE__ */ jsx33(Text25, { dimColor: true, children: `next page: --starting-after ${nextCursor}` }) : null
+    ] }) : null
+  ] });
+};
+
+// src/commands/transactions/schema.ts
+import { z as z12 } from "incur";
+var ISO_DATE_REGEX = /^\d{4}-\d{2}-\d{2}$/;
+var listOptions4 = z12.object({
+  limit: z12.coerce.number().int().positive().max(100).optional().describe("Maximum number of transactions to return (1-100)."),
+  startingAfter: z12.string().optional().describe("Cursor: return transactions after this transaction ID."),
+  endingBefore: z12.string().optional().describe("Cursor: return transactions before this transaction ID."),
+  startDate: z12.string().regex(ISO_DATE_REGEX, "Date must be in YYYY-MM-DD format.").optional().describe("Only include transactions on or after this YYYY-MM-DD date."),
+  endDate: z12.string().regex(ISO_DATE_REGEX, "Date must be in YYYY-MM-DD format.").optional().describe("Only include transactions on or before this YYYY-MM-DD date."),
+  category: z12.string().optional().describe("Filter by transaction category."),
+  origin: z12.enum(["link", "external_connection"]).optional().describe("Filter by transaction origin: link or external_connection."),
+  source: z12.array(z12.string()).default([]).describe("Filter by source ID. Repeat to include multiple sources.")
+});
+
+// src/commands/transactions/index.tsx
+import { jsx as jsx34 } from "react/jsx-runtime";
+function createTransactionsCli(createResource, authStorage2, envAccessToken2) {
+  const cli2 = Cli12.create("transactions", {
+    description: "List transactions from Link and external accounts"
+  });
+  cli2.command("list", {
+    description: "List transactions from Link and external accounts, including non-Link activity",
+    options: listOptions4,
+    outputPolicy: "agent-only",
+    middleware: [requireAuth(authStorage2, envAccessToken2)],
+    async run(c) {
+      const opts = c.options;
+      const resource = createResource();
+      const params = {};
+      if (opts.limit !== void 0) params.limit = opts.limit;
+      if (opts.startingAfter !== void 0)
+        params.starting_after = opts.startingAfter;
+      if (opts.endingBefore !== void 0)
+        params.ending_before = opts.endingBefore;
+      if (opts.startDate !== void 0) params.start_date = opts.startDate;
+      if (opts.endDate !== void 0) params.end_date = opts.endDate;
+      if (opts.category !== void 0) params.category = opts.category;
+      if (opts.origin !== void 0) params.origin = opts.origin;
+      if (opts.source.length > 0) params.sources = opts.source;
+      if (!c.agent && !c.formatExplicit) {
+        return renderInteractive(
+          /* @__PURE__ */ jsx34(
+            TransactionsList,
+            {
+              resource,
+              params,
+              onComplete: () => {
+              }
+            }
+          ),
+          () => resource.listTransactions(params)
+        );
+      }
+      return resource.listTransactions(params);
+    }
+  });
+  return cli2;
+}
+
 // src/commands/user-info/index.tsx
-import { Cli as Cli10 } from "incur";
+import { Cli as Cli13 } from "incur";
 
 // src/commands/user-info/retrieve.tsx
-import { Box as Box21, Text as Text23 } from "ink";
-import Spinner13 from "ink-spinner";
-import { useCallback as useCallback10 } from "react";
-import { jsx as jsx29, jsxs as jsxs21 } from "react/jsx-runtime";
+import { Box as Box24, Text as Text26 } from "ink";
+import Spinner16 from "ink-spinner";
+import { useCallback as useCallback13 } from "react";
+import { jsx as jsx35, jsxs as jsxs24 } from "react/jsx-runtime";
 var UserInfoRetrieve = ({
   resource,
   onComplete
 }) => {
-  const action = useCallback10(() => resource.retrieve(), [resource]);
+  const action = useCallback13(() => resource.retrieve(), [resource]);
   const { status, data: userInfo, error } = useAsyncAction(action, onComplete);
   if (status === "loading") {
-    return /* @__PURE__ */ jsx29(Box21, { children: /* @__PURE__ */ jsxs21(Text23, { color: "cyan", children: [
-      /* @__PURE__ */ jsx29(Spinner13, { type: "dots" }),
+    return /* @__PURE__ */ jsx35(Box24, { children: /* @__PURE__ */ jsxs24(Text26, { color: "cyan", children: [
+      /* @__PURE__ */ jsx35(Spinner16, { type: "dots" }),
       " Loading user info..."
     ] }) });
   }
   if (status === "error") {
-    return /* @__PURE__ */ jsxs21(Box21, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsx29(Text23, { color: "red", children: "\u2717 Failed to load user info" }),
-      /* @__PURE__ */ jsx29(Text23, { color: "red", children: error })
+    return /* @__PURE__ */ jsxs24(Box24, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx35(Text26, { color: "red", children: "\u2717 Failed to load user info" }),
+      /* @__PURE__ */ jsx35(Text26, { color: "red", children: error })
     ] });
   }
-  return /* @__PURE__ */ jsxs21(Box21, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsx29(Text23, { bold: true, children: "User Info" }),
-    /* @__PURE__ */ jsxs21(Box21, { flexDirection: "column", marginTop: 1, paddingX: 2, children: [
-      /* @__PURE__ */ jsxs21(Text23, { children: [
-        /* @__PURE__ */ jsx29(Text23, { dimColor: true, children: "Email: " }),
-        userInfo?.email ?? /* @__PURE__ */ jsx29(Text23, { dimColor: true, children: "Not set" })
+  return /* @__PURE__ */ jsxs24(Box24, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx35(Text26, { bold: true, children: "User Info" }),
+    /* @__PURE__ */ jsxs24(Box24, { flexDirection: "column", marginTop: 1, paddingX: 2, children: [
+      /* @__PURE__ */ jsxs24(Text26, { children: [
+        /* @__PURE__ */ jsx35(Text26, { dimColor: true, children: "Email: " }),
+        userInfo?.email ?? /* @__PURE__ */ jsx35(Text26, { dimColor: true, children: "Not set" })
       ] }),
-      /* @__PURE__ */ jsxs21(Text23, { children: [
-        /* @__PURE__ */ jsx29(Text23, { dimColor: true, children: "Name: " }),
-        userInfo?.name ?? /* @__PURE__ */ jsx29(Text23, { dimColor: true, children: "Not set" })
+      /* @__PURE__ */ jsxs24(Text26, { children: [
+        /* @__PURE__ */ jsx35(Text26, { dimColor: true, children: "Name: " }),
+        userInfo?.name ?? /* @__PURE__ */ jsx35(Text26, { dimColor: true, children: "Not set" })
       ] }),
-      /* @__PURE__ */ jsxs21(Text23, { children: [
-        /* @__PURE__ */ jsx29(Text23, { dimColor: true, children: "Phone: " }),
-        userInfo?.phone ?? /* @__PURE__ */ jsx29(Text23, { dimColor: true, children: "Not set" })
+      /* @__PURE__ */ jsxs24(Text26, { children: [
+        /* @__PURE__ */ jsx35(Text26, { dimColor: true, children: "Phone: " }),
+        userInfo?.phone ?? /* @__PURE__ */ jsx35(Text26, { dimColor: true, children: "Not set" })
       ] })
     ] })
   ] });
 };
 
 // src/commands/user-info/index.tsx
-import { jsx as jsx30 } from "react/jsx-runtime";
+import { jsx as jsx36 } from "react/jsx-runtime";
 function createUserInfoCli(createResource, authStorage2, envAccessToken2) {
-  const cli2 = Cli10.create("user-info", {
+  const cli2 = Cli13.create("user-info", {
     description: "User information commands"
   });
   cli2.command("retrieve", {
@@ -16197,7 +17262,7 @@ function createUserInfoCli(createResource, authStorage2, envAccessToken2) {
       const resource = createResource();
       if (!c.agent && !c.formatExplicit) {
         return renderInteractive(
-          /* @__PURE__ */ jsx30(UserInfoRetrieve, { resource, onComplete: () => {
+          /* @__PURE__ */ jsx36(UserInfoRetrieve, { resource, onComplete: () => {
           } }),
           () => resource.retrieve()
         );
@@ -16248,11 +17313,55 @@ function requireFetchImplementation2(config) {
 
 // src/auth/auth-resource.ts
 var CLIENT_ID = "lwlpk_U7Qy7ThG69STZk";
-var DEFAULT_SCOPE = "userinfo:read payment_methods.agentic";
 function formatOAuthError(prefix, status, data, rawBody) {
   const err = data;
   return `${prefix} (${status}): ${err?.error_description ?? err?.error ?? (rawBody || "unknown error")}`;
 }
+function appendAuthorizationDetailValue(params, key, value) {
+  if (Array.isArray(value)) {
+    for (const entry of value) {
+      appendAuthorizationDetailValue(params, `${key}[]`, entry);
+    }
+    return;
+  }
+  if (value !== null && typeof value === "object") {
+    for (const [entryKey, entryValue] of Object.entries(value)) {
+      appendAuthorizationDetailValue(params, `${key}[${entryKey}]`, entryValue);
+    }
+    return;
+  }
+  params.append(key, String(value));
+}
+function buildDeviceCodeForm(clientName, options) {
+  const connectionLabel = `${clientName} on ${hostname()}`;
+  const params = new URLSearchParams({
+    client_id: CLIENT_ID,
+    scope: options.scope ?? DEFAULT_SCOPE,
+    connection_label: connectionLabel,
+    client_hint: clientName
+  });
+  const authorizationDetails = buildAuthorizationDetails(
+    options.sourceActions,
+    options.authorizationDetails
+  );
+  for (const detail of authorizationDetails) {
+    appendAuthorizationDetailValue(params, "authorization_details[]", detail);
+  }
+  return params;
+}
+function serializeFormBody(params) {
+  return params instanceof URLSearchParams ? params.toString() : new URLSearchParams(params).toString();
+}
+function serializeRedactedFormBody(params) {
+  const redacted = new URLSearchParams(params);
+  if (redacted.has("device_code")) {
+    redacted.set("device_code", "<redacted>");
+  }
+  if (redacted.has("refresh_token")) {
+    redacted.set("refresh_token", "<redacted>");
+  }
+  return redacted.toString();
+}
 var LinkAuthResource = class {
   config;
   fetchImpl;
@@ -16262,12 +17371,9 @@ var LinkAuthResource = class {
   }
   async postForm(url, params) {
     if (this.config.verbose) {
-      const redacted = { ...params };
-      if (redacted.device_code) redacted.device_code = "<redacted>";
-      if (redacted.refresh_token) redacted.refresh_token = "<redacted>";
       this.config.logger.debug(
         `> POST ${url}
-${JSON.stringify(redacted, null, 2)}`
+${serializeRedactedFormBody(params)}`
       );
     }
     let response;
@@ -16278,7 +17384,7 @@ ${JSON.stringify(redacted, null, 2)}`
           ...this.config.defaultHeaders,
           "Content-Type": "application/x-www-form-urlencoded"
         },
-        body: new URLSearchParams(params).toString()
+        body: serializeFormBody(params)
       });
     } catch (error) {
       throw new LinkTransportError(`Request failed: POST ${url}`, {
@@ -16300,16 +17406,12 @@ ${JSON.stringify(redacted, null, 2)}`
     }
     return { status: response.status, data, rawBody };
   }
-  async initiateDeviceAuth(clientName) {
-    const effectiveName = clientName ?? this.config.clientName;
+  async initiateDeviceAuth(options = {}) {
+    const effectiveName = options.clientName ?? this.config.clientName;
+    const params = buildDeviceCodeForm(effectiveName, options);
     const { status, data, rawBody } = await this.postForm(
       `${this.config.authBaseUrl}/device/code`,
-      {
-        client_id: CLIENT_ID,
-        scope: DEFAULT_SCOPE,
-        connection_label: `${effectiveName} on ${hostname()}`,
-        client_hint: effectiveName
-      }
+      params
     );
     if (status < 200 || status >= 300) {
       throw new LinkApiError(
@@ -16488,6 +17590,9 @@ var ResourceFactory = class {
   paymentMethodsResource;
   shippingAddressResource;
   userInfoResource;
+  transactionsResource;
+  sourcesResource;
+  balancesResource;
   webBotAuthResource;
   reportResource;
   constructor(options = {}) {
@@ -16602,6 +17707,48 @@ var ResourceFactory = class {
     );
     return this.userInfoResource;
   }
+  createTransactionsResource() {
+    if (this.transactionsResource) {
+      return this.transactionsResource;
+    }
+    const getAccessToken = this.createSdkAccessTokenProvider();
+    this.transactionsResource = sanitizeResource(
+      new TransactionsResource({
+        verbose: this.verbose,
+        defaultHeaders: this.defaultHeaders,
+        getAccessToken
+      })
+    );
+    return this.transactionsResource;
+  }
+  createSourcesResource() {
+    if (this.sourcesResource) {
+      return this.sourcesResource;
+    }
+    const getAccessToken = this.createSdkAccessTokenProvider();
+    this.sourcesResource = sanitizeResource(
+      new SourcesResource({
+        verbose: this.verbose,
+        defaultHeaders: this.defaultHeaders,
+        getAccessToken
+      })
+    );
+    return this.sourcesResource;
+  }
+  createBalancesResource() {
+    if (this.balancesResource) {
+      return this.balancesResource;
+    }
+    const getAccessToken = this.createSdkAccessTokenProvider();
+    this.balancesResource = sanitizeResource(
+      new BalancesResource({
+        verbose: this.verbose,
+        defaultHeaders: this.defaultHeaders,
+        getAccessToken
+      })
+    );
+    return this.balancesResource;
+  }
   createWebBotAuthResource() {
     if (this.webBotAuthResource) {
       return this.webBotAuthResource;
@@ -16703,12 +17850,16 @@ function cacheUpdateInfo(value, ttlMs = UPDATE_CACHE_TTL_MS) {
 }
 
 // src/cli.tsx
-var cliVersion = "0.8.2";
+var cliVersion = "0.9.0";
 var cliName = "@stripe/link-cli";
 var defaultHeaders = {
   "User-Agent": `link-cli/${cliVersion}`
 };
-var verbose = process.argv.includes("--verbose");
+var verboseIndex = process.argv.indexOf("--verbose");
+var verbose = verboseIndex !== -1;
+if (verboseIndex !== -1) {
+  process.argv.splice(verboseIndex, 1);
+}
 var authFileIndex = process.argv.indexOf("--auth");
 var credentialFilePath = authFileIndex !== -1 ? process.argv[authFileIndex + 1] : process.env.LINK_AUTH_FILE;
 if (authFileIndex !== -1) {
@@ -16728,7 +17879,24 @@ var factory = new ResourceFactory({
 });
 var authRepo = factory.createAuthResource();
 var spendRequestRepo = factory.createSpendRequestResource();
-var cli = Cli11.create("link-cli", {
+var requestedCommand = process.argv[2];
+var hiddenCli = requestedCommand === "transactions" ? createTransactionsCli(
+  () => factory.createTransactionsResource(),
+  authStorage,
+  envAccessToken
+) : requestedCommand === "sources" ? createSourcesCli(
+  () => factory.createSourcesResource(),
+  authStorage,
+  envAccessToken
+) : requestedCommand === "balances" ? createBalancesCli(
+  () => factory.createBalancesResource(),
+  authStorage,
+  envAccessToken
+) : null;
+if (hiddenCli) {
+  process.argv.splice(2, 1);
+}
+var cli = hiddenCli ?? Cli14.create("link-cli", {
   description: "Create a secure, one-time payment credential from a Link wallet to let agents complete purchases on behalf of users.",
   version: cliVersion
 });
@@ -16745,58 +17913,60 @@ if (!isAgent && process.stdout.isTTY) {
     process.stderr.write(renderInteractiveUpdateNotice(updateInfo));
   }
 }
-cli.command(
-  createAuthCli(authRepo, getUpdateInfo, authStorage, envAccessToken)
-);
-cli.command(
-  createSpendRequestCli(spendRequestRepo, authStorage, envAccessToken)
-);
-cli.command(
-  createPaymentMethodsCli(
-    () => factory.createPaymentMethodsResource(),
-    authStorage,
-    envAccessToken
-  )
-);
-cli.command(
-  createShippingAddressCli(
-    () => factory.createShippingAddressResource(),
-    authStorage,
-    envAccessToken
-  )
-);
-cli.command(
-  createUserInfoCli(
-    () => factory.createUserInfoResource(),
-    authStorage,
-    envAccessToken
-  )
-);
-cli.command(createMppCli(spendRequestRepo, authStorage, envAccessToken));
-cli.command(
-  createReportCli(
-    () => factory.createReportResource(),
-    authStorage,
-    envAccessToken
-  )
-);
-cli.command(
-  createDemoCli(
-    authRepo,
-    spendRequestRepo,
-    () => factory.createPaymentMethodsResource(),
-    authStorage
-  )
-);
-cli.command(
-  createOnboardCli(
-    authRepo,
-    spendRequestRepo,
-    () => factory.createPaymentMethodsResource(),
-    authStorage
-  )
-);
-cli.command(createServeCli(cli));
+if (!hiddenCli) {
+  cli.command(
+    createAuthCli(authRepo, getUpdateInfo, authStorage, envAccessToken)
+  );
+  cli.command(
+    createSpendRequestCli(spendRequestRepo, authStorage, envAccessToken)
+  );
+  cli.command(
+    createPaymentMethodsCli(
+      () => factory.createPaymentMethodsResource(),
+      authStorage,
+      envAccessToken
+    )
+  );
+  cli.command(
+    createShippingAddressCli(
+      () => factory.createShippingAddressResource(),
+      authStorage,
+      envAccessToken
+    )
+  );
+  cli.command(
+    createUserInfoCli(
+      () => factory.createUserInfoResource(),
+      authStorage,
+      envAccessToken
+    )
+  );
+  cli.command(createMppCli(spendRequestRepo, authStorage, envAccessToken));
+  cli.command(
+    createReportCli(
+      () => factory.createReportResource(),
+      authStorage,
+      envAccessToken
+    )
+  );
+  cli.command(
+    createDemoCli(
+      authRepo,
+      spendRequestRepo,
+      () => factory.createPaymentMethodsResource(),
+      authStorage
+    )
+  );
+  cli.command(
+    createOnboardCli(
+      authRepo,
+      spendRequestRepo,
+      () => factory.createPaymentMethodsResource(),
+      authStorage
+    )
+  );
+  cli.command(createServeCli(cli));
+}
 cli.serve();
 var cli_default = cli;
 export {