@stripe/link-cli 0.8.3 → 0.10.0

package/dist/cli.js

@@ -8835,19 +8835,19 @@ var require_range = __commonJS({
     var replaceCaret = (comp, options) => {
       debug("caret", comp, options);
       const r = options.loose ? re[t.CARETLOOSE] : re[t.CARET];
-      const z11 = options.includePrerelease ? "-0" : "";
+      const z13 = options.includePrerelease ? "-0" : "";
       return comp.replace(r, (_, M, m, p, pr) => {
         debug("caret", comp, _, M, m, p, pr);
         let ret;
         if (isX(M)) {
           ret = "";
         } else if (isX(m)) {
-          ret = `>=${M}.0.0${z11} <${+M + 1}.0.0-0`;
+          ret = `>=${M}.0.0${z13} <${+M + 1}.0.0-0`;
         } else if (isX(p)) {
           if (M === "0") {
-            ret = `>=${M}.${m}.0${z11} <${M}.${+m + 1}.0-0`;
+            ret = `>=${M}.${m}.0${z13} <${M}.${+m + 1}.0-0`;
           } else {
-            ret = `>=${M}.${m}.0${z11} <${+M + 1}.0.0-0`;
+            ret = `>=${M}.${m}.0${z13} <${+M + 1}.0.0-0`;
           }
         } else if (pr) {
           debug("replaceCaret pr", pr);
@@ -8864,9 +8864,9 @@ var require_range = __commonJS({
           debug("no pr");
           if (M === "0") {
             if (m === "0") {
-              ret = `>=${M}.${m}.${p}${z11} <${M}.${m}.${+p + 1}-0`;
+              ret = `>=${M}.${m}.${p}${z13} <${M}.${m}.${+p + 1}-0`;
             } else {
-              ret = `>=${M}.${m}.${p}${z11} <${M}.${+m + 1}.0-0`;
+              ret = `>=${M}.${m}.${p}${z13} <${M}.${+m + 1}.0-0`;
             }
           } else {
             ret = `>=${M}.${m}.${p} <${+M + 1}.0.0-0`;
@@ -11148,6 +11148,178 @@ function requireFetchImplementation(config) {
   }
   return config.fetch;
 }
+function isRecord(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function requireBoolean(value, field) {
+  if (typeof value !== "boolean") {
+    throw new TypeError(`Expected ${field} to be a boolean`);
+  }
+  return value;
+}
+function extractErrorMessage(data, rawBody) {
+  if (isRecord(data)) {
+    if (typeof data.error === "string") {
+      return data.error;
+    }
+    if (isRecord(data.error)) {
+      const nested = data.error;
+      if (typeof nested.message === "string") {
+        return nested.message;
+      }
+      if (typeof nested.code === "string") {
+        return nested.code;
+      }
+    }
+    if (typeof data.message === "string") {
+      return data.message;
+    }
+  }
+  return rawBody || "unknown error";
+}
+var BaseResource = class {
+  verbose;
+  getAccessToken;
+  fetchImpl;
+  endpoint;
+  logger;
+  constructor(options, endpointPath) {
+    const config = resolveLinkSdkConfig(options);
+    this.verbose = config.verbose;
+    this.getAccessToken = config.getAccessToken;
+    this.fetchImpl = requireFetchImplementation(config);
+    this.endpoint = `${config.apiBaseUrl}${endpointPath}`;
+    this.logger = config.logger;
+  }
+  async rawFetch(opts) {
+    if (this.verbose) {
+      const redactedHeaders = { ...opts.headers };
+      if (redactedHeaders.Authorization)
+        redactedHeaders.Authorization = "Bearer <redacted>";
+      this.logger.debug(`> ${opts.method} ${opts.url}`);
+      this.logger.debug(`  Headers: ${JSON.stringify(redactedHeaders)}`);
+    }
+    let response;
+    try {
+      response = await this.fetchImpl(opts.url, {
+        method: opts.method,
+        headers: opts.headers
+      });
+    } catch (error) {
+      throw new LinkTransportError(
+        `Request failed: ${opts.method} ${opts.url}`,
+        { cause: error }
+      );
+    }
+    const rawBody = await response.text();
+    let data = null;
+    try {
+      data = JSON.parse(rawBody);
+    } catch {
+    }
+    if (this.verbose) {
+      this.logger.debug(`< ${response.status} ${response.statusText}`);
+      response.headers.forEach((value, key) => {
+        this.logger.debug(`  ${key}: ${value}`);
+      });
+      this.logger.debug(rawBody);
+    }
+    return { status: response.status, data, rawBody };
+  }
+  async apiFetch(opts) {
+    const token = await this.getAccessToken();
+    const authedOpts = {
+      ...opts,
+      headers: {
+        ...opts.headers,
+        Authorization: `Bearer ${token}`
+      }
+    };
+    const res = await this.rawFetch(authedOpts);
+    if (res.status === 401) {
+      const refreshedToken = await this.getAccessToken({ forceRefresh: true });
+      authedOpts.headers.Authorization = `Bearer ${refreshedToken}`;
+      return this.rawFetch(authedOpts);
+    }
+    return res;
+  }
+  throwApiError(operation, status, data, rawBody, cause) {
+    const msg = extractErrorMessage(data, rawBody);
+    throw new LinkApiError(`Failed to ${operation} (${status}): ${msg}`, {
+      status,
+      rawBody,
+      details: data,
+      cause
+    });
+  }
+};
+function normalizeBalances(value) {
+  if (!Array.isArray(value)) {
+    throw new TypeError("Expected balances to be an array");
+  }
+  return value.map((item, index) => {
+    if (!isRecord(item)) {
+      throw new TypeError(`Expected balances[${index}] to be an object`);
+    }
+    return item;
+  });
+}
+function normalizeBalancesPage(value) {
+  if (!isRecord(value)) {
+    throw new TypeError("Expected response body to be an object");
+  }
+  const { data, has_more, ...rest } = value;
+  const normalized = normalizeBalances(data);
+  return {
+    ...rest,
+    data: normalized,
+    ...has_more !== void 0 ? { has_more: requireBoolean(has_more, "has_more") } : {}
+  };
+}
+var BalancesResource = class extends BaseResource {
+  constructor(options = {}) {
+    super(options, "/balances");
+  }
+  buildUrl(params) {
+    const url = new URL(this.endpoint);
+    if (params.sources !== void 0) {
+      for (const source of params.sources) {
+        url.searchParams.append("sources[]", source);
+      }
+    }
+    if (params.limit !== void 0) {
+      url.searchParams.set("limit", String(params.limit));
+    }
+    if (params.starting_after !== void 0) {
+      url.searchParams.set("starting_after", params.starting_after);
+    }
+    if (params.ending_before !== void 0) {
+      url.searchParams.set("ending_before", params.ending_before);
+    }
+    return url.toString();
+  }
+  list(params = {}) {
+    return this.listBalances(params);
+  }
+  async listBalances(params = {}) {
+    const { status, data, rawBody } = await this.apiFetch({
+      method: "GET",
+      url: this.buildUrl(params)
+    });
+    if (status < 200 || status >= 300) {
+      this.throwApiError("list balances", status, data, rawBody);
+    }
+    try {
+      return normalizeBalancesPage(data);
+    } catch (error) {
+      const reason = error instanceof Error ? `: ${error.message}` : "";
+      throw new LinkApiError(
+        `Failed to list balances (${status}): invalid response shape${reason}`,
+        { status, rawBody, details: data, cause: error }
+      );
+    }
+  }
+};
 var PaymentMethodsResource = class {
   verbose;
   getAccessToken;
@@ -11318,6 +11490,68 @@ var ShippingAddressResource = class {
     return body?.shipping_addresses ?? [];
   }
 };
+function normalizeSources(value) {
+  if (!Array.isArray(value)) {
+    throw new TypeError("Expected sources to be an array");
+  }
+  return value.map((item, index) => {
+    if (!isRecord(item)) {
+      throw new TypeError(`Expected sources[${index}] to be an object`);
+    }
+    return item;
+  });
+}
+function normalizeSourcesPage(value) {
+  if (!isRecord(value)) {
+    throw new TypeError("Expected response body to be an object");
+  }
+  const { data, has_more, ...rest } = value;
+  const normalized = normalizeSources(data);
+  return {
+    ...rest,
+    data: normalized,
+    ...has_more !== void 0 ? { has_more: requireBoolean(has_more, "has_more") } : {}
+  };
+}
+var SourcesResource = class extends BaseResource {
+  constructor(options = {}) {
+    super(options, "/sources");
+  }
+  buildUrl(params) {
+    const url = new URL(this.endpoint);
+    if (params.limit !== void 0) {
+      url.searchParams.set("limit", String(params.limit));
+    }
+    if (params.starting_after !== void 0) {
+      url.searchParams.set("starting_after", params.starting_after);
+    }
+    if (params.ending_before !== void 0) {
+      url.searchParams.set("ending_before", params.ending_before);
+    }
+    return url.toString();
+  }
+  list(params = {}) {
+    return this.listSources(params);
+  }
+  async listSources(params = {}) {
+    const { status, data, rawBody } = await this.apiFetch({
+      method: "GET",
+      url: this.buildUrl(params)
+    });
+    if (status < 200 || status >= 300) {
+      this.throwApiError("list sources", status, data, rawBody);
+    }
+    try {
+      return normalizeSourcesPage(data);
+    } catch (error) {
+      const reason = error instanceof Error ? `: ${error.message}` : "";
+      throw new LinkApiError(
+        `Failed to list sources (${status}): invalid response shape${reason}`,
+        { status, rawBody, details: data, cause: error }
+      );
+    }
+  }
+};
 function normalizeSpendRequest(data) {
   const sr = data;
   if (typeof sr.shared_payment_token === "string") {
@@ -11524,9 +11758,6 @@ var SpendRequestResource = class {
     return normalizeSpendRequest(data);
   }
 };
-function isRecord(value) {
-  return value !== null && typeof value === "object" && !Array.isArray(value);
-}
 function requireString(value, field) {
   if (typeof value !== "string") {
     throw new TypeError(`Expected ${field} to be a string`);
@@ -11548,12 +11779,6 @@ function requireNumber(value, field) {
   }
   return value;
 }
-function requireBoolean(value, field) {
-  if (typeof value !== "boolean") {
-    throw new TypeError(`Expected ${field} to be a boolean`);
-  }
-  return value;
-}
 function requireTransactionOrigin(value, field) {
   if (value === "link" || value === "external_connection") {
     return value;
@@ -11611,71 +11836,9 @@ function normalizeTransactionsPage(value) {
     ...has_more !== void 0 ? { has_more: requireBoolean(has_more, "has_more") } : {}
   };
 }
-var TransactionsResource = class {
-  verbose;
-  getAccessToken;
-  fetchImpl;
-  endpoint;
-  logger;
+var TransactionsResource = class extends BaseResource {
   constructor(options = {}) {
-    const config = resolveLinkSdkConfig(options);
-    this.verbose = config.verbose;
-    this.getAccessToken = config.getAccessToken;
-    this.fetchImpl = requireFetchImplementation(config);
-    this.endpoint = `${config.apiBaseUrl}/transactions`;
-    this.logger = config.logger;
-  }
-  async rawFetch(opts) {
-    if (this.verbose) {
-      const redactedHeaders = { ...opts.headers };
-      if (redactedHeaders.Authorization)
-        redactedHeaders.Authorization = "Bearer <redacted>";
-      this.logger.debug(`> ${opts.method} ${opts.url}`);
-      this.logger.debug(`  Headers: ${JSON.stringify(redactedHeaders)}`);
-    }
-    let response;
-    try {
-      response = await this.fetchImpl(opts.url, {
-        method: opts.method,
-        headers: opts.headers
-      });
-    } catch (error) {
-      throw new LinkTransportError(
-        `Request failed: ${opts.method} ${opts.url}`,
-        { cause: error }
-      );
-    }
-    const rawBody = await response.text();
-    let data = null;
-    try {
-      data = JSON.parse(rawBody);
-    } catch {
-    }
-    if (this.verbose) {
-      this.logger.debug(`< ${response.status} ${response.statusText}`);
-      response.headers.forEach((value, key) => {
-        this.logger.debug(`  ${key}: ${value}`);
-      });
-      this.logger.debug(rawBody);
-    }
-    return { status: response.status, data, rawBody };
-  }
-  async apiFetch(opts) {
-    const token = await this.getAccessToken();
-    const authedOpts = {
-      ...opts,
-      headers: {
-        ...opts.headers,
-        Authorization: `Bearer ${token}`
-      }
-    };
-    const res = await this.rawFetch(authedOpts);
-    if (res.status === 401) {
-      const refreshedToken = await this.getAccessToken({ forceRefresh: true });
-      authedOpts.headers.Authorization = `Bearer ${refreshedToken}`;
-      return this.rawFetch(authedOpts);
-    }
-    return res;
+    super(options, "/transactions");
   }
   buildUrl(params) {
     const url = new URL(this.endpoint);
@@ -11716,19 +11879,14 @@ var TransactionsResource = class {
       url: this.buildUrl(params)
     });
     if (status < 200 || status >= 300) {
-      const body = data;
-      const msg = body?.error ?? body?.message ?? (rawBody || "unknown error");
-      throw new LinkApiError(
-        `Failed to list transactions (${status}): ${msg}`,
-        { status, rawBody, details: data }
-      );
+      this.throwApiError("list transactions", status, data, rawBody);
     }
     try {
       return normalizeTransactionsPage(data);
     } catch (error) {
       const reason = error instanceof Error ? `: ${error.message}` : "";
       throw new LinkApiError(
-        `Failed to list transactions (200): invalid response shape${reason}`,
+        `Failed to list transactions (${status}): invalid response shape${reason}`,
         { status, rawBody, details: data, cause: error }
       );
     }
@@ -11826,6 +11984,12 @@ var UserInfoResource = class {
     };
   }
 };
+var SOURCE_ACTIONS = [
+  "read_balances",
+  "read_external_transactions",
+  "read_link_transactions",
+  "read_source_details"
+];
 var REPORT_OUTCOMES = ["success", "blocked", "abandoned"];
 var REPORT_TAGS = [
   "stripe_checkout",
@@ -12053,12 +12217,69 @@ var ReportResource = class {
 };
 
 // src/cli.tsx
-import { Cli as Cli12 } from "incur";
+import { Cli as Cli14 } from "incur";
 
 // src/commands/auth/index.tsx
 import { Cli } from "incur";
 import { Text as Text4 } from "ink";
 
+// src/auth/authorization-details.ts
+var INVALID_AUTHORIZATION_DETAIL_MESSAGE = "authorization-detail must be valid JSON";
+function dedupe(values) {
+  const seen = /* @__PURE__ */ new Set();
+  const result = [];
+  for (const value of values) {
+    if (seen.has(value)) {
+      continue;
+    }
+    seen.add(value);
+    result.push(value);
+  }
+  return result;
+}
+function parseAuthorizationDetails(entries) {
+  const parsed = [];
+  for (const entry of entries ?? []) {
+    try {
+      parsed.push(JSON.parse(entry));
+    } catch {
+      throw new Error(INVALID_AUTHORIZATION_DETAIL_MESSAGE);
+    }
+  }
+  return parsed;
+}
+function buildAuthorizationDetails(sourceActions, authorizationDetails) {
+  const details = [];
+  const uniqueSourceActions = dedupe(sourceActions ?? []);
+  if (uniqueSourceActions.length > 0) {
+    details.push({
+      type: "source",
+      actions: uniqueSourceActions
+    });
+  }
+  if (authorizationDetails) {
+    details.push(...authorizationDetails);
+  }
+  return details;
+}
+
+// src/auth/scopes.ts
+var DEFAULT_SCOPES = [
+  "userinfo:read",
+  "payment_methods.agentic"
+];
+var DEFAULT_SCOPE = DEFAULT_SCOPES.join(" ");
+function parseScopeTokens(scope) {
+  return scope.trim().split(/\s+/).filter(Boolean);
+}
+function normalizeScopeInput(scope) {
+  if (scope === void 0) {
+    return void 0;
+  }
+  const normalized = parseScopeTokens(scope);
+  return normalized.length > 0 ? normalized.join(" ") : void 0;
+}
+
 // src/utils/poll-until.ts
 async function* pollUntil(options) {
   const { fn, isTerminal, interval, timeout, maxAttempts } = options;
@@ -12175,6 +12396,9 @@ import { jsx, jsxs } from "react/jsx-runtime";
 var Login = ({
   authResource,
   clientName,
+  scope,
+  sourceActions,
+  authorizationDetails,
   authStorage: authStorage2 = storage,
   onComplete
 }) => {
@@ -12195,7 +12419,12 @@ var Login = ({
   useEffect(() => {
     const initAuth = async () => {
       try {
-        const authRequest = await authResource.initiateDeviceAuth(clientName);
+        const authRequest = await authResource.initiateDeviceAuth({
+          clientName,
+          scope,
+          sourceActions,
+          authorizationDetails
+        });
         setUserCode(authRequest.user_code);
         setVerificationUrl(authRequest.verification_url_complete);
         setDeviceCode(authRequest.device_code);
@@ -12206,7 +12435,7 @@ var Login = ({
       }
     };
     initAuth();
-  }, [authResource, clientName]);
+  }, [authResource, authorizationDetails, clientName, scope, sourceActions]);
   useEffect(() => {
     if (status !== "waiting" || !deviceCode) return;
     const startPolling = async () => {
@@ -12245,17 +12474,17 @@ var Login = ({
   if (status === "declined") {
     return /* @__PURE__ */ jsxs(Box, { flexDirection: "column", children: [
       /* @__PURE__ */ jsx(Text, { color: "red", children: "\u2717 Authorization failed" }),
-      Object.entries(scopeEligibility).map(([scope, info]) => /* @__PURE__ */ jsxs(Box, { flexDirection: "column", marginLeft: 2, children: [
+      Object.entries(scopeEligibility).map(([scope2, info]) => /* @__PURE__ */ jsxs(Box, { flexDirection: "column", marginLeft: 2, children: [
         /* @__PURE__ */ jsxs(Text, { children: [
           /* @__PURE__ */ jsxs(Text, { dimColor: true, children: [
-            scope,
+            scope2,
             ":"
           ] }),
           " ineligible",
           info.ineligibility_reasons.length > 0 ? ` (${info.ineligibility_reasons.join(", ")})` : ""
         ] }),
         info.description ? /* @__PURE__ */ jsx(Text, { dimColor: true, children: info.description }) : null
-      ] }, scope))
+      ] }, scope2))
     ] });
   }
   if (status === "error") {
@@ -12379,10 +12608,18 @@ var Logout = ({
 
 // src/commands/auth/schema.ts
 import { z } from "incur";
+var SOURCE_ACTIONS_DESCRIPTION = SOURCE_ACTIONS.join(", ");
 var loginOptions = z.object({
   clientName: z.string().default("Link CLI").describe(
     "Agent or app name shown in the Link app when approving the device connection"
   ),
+  scope: z.string().optional().describe(
+    "Optional space-separated Link scopes to request. Quote the value when passing multiple scopes."
+  ),
+  sourceActions: z.array(z.enum(SOURCE_ACTIONS)).default([]).describe(
+    `Source action to request via authorization_details (repeatable). Accepted values: ${SOURCE_ACTIONS_DESCRIPTION}.`
+  ),
+  authorizationDetail: z.array(z.string()).default([]).describe("Freeform authorization_details entry as raw JSON (repeatable)."),
   interval: z.coerce.number().default(0).describe(
     "Poll interval in seconds. When > 0, polls until authenticated or timeout is reached, yielding status on each attempt."
   ),
@@ -12538,12 +12775,30 @@ function createAuthCli(authResource, getUpdateInfo2, authStorage2, envAccessToke
     outputPolicy: "agent-only",
     async *run(c) {
       const clientName = c.options.clientName?.trim();
+      const scope = normalizeScopeInput(c.options.scope);
+      let authorizationDetails;
       if (!clientName || clientName.length === 0) {
         return c.error({
           code: "INVALID_INPUT",
           message: "client-name must be a non-empty string"
         });
       }
+      if (c.options.scope !== void 0 && !scope) {
+        return c.error({
+          code: "INVALID_INPUT",
+          message: "scope must be a non-empty string when provided"
+        });
+      }
+      try {
+        authorizationDetails = parseAuthorizationDetails(
+          c.options.authorizationDetail
+        );
+      } catch (error) {
+        return c.error({
+          code: "INVALID_INPUT",
+          message: error.message
+        });
+      }
       const existingAuth = storage2.getAuth();
       if (existingAuth?.refresh_token) {
         try {
@@ -12575,6 +12830,9 @@ function createAuthCli(authResource, getUpdateInfo2, authStorage2, envAccessToke
             {
               authResource,
               clientName,
+              scope,
+              sourceActions: c.options.sourceActions,
+              authorizationDetails,
               authStorage: storage2,
               onComplete: () => {
               }
@@ -12583,7 +12841,12 @@ function createAuthCli(authResource, getUpdateInfo2, authStorage2, envAccessToke
           () => ({ authenticated: true, token_type: "Bearer" })
         );
       }
-      const authRequest = await authResource.initiateDeviceAuth(clientName);
+      const authRequest = await authResource.initiateDeviceAuth({
+        clientName,
+        scope,
+        sourceActions: c.options.sourceActions,
+        authorizationDetails
+      });
       storage2.setPendingDeviceAuth({
         device_code: authRequest.device_code,
         interval: authRequest.interval,
@@ -12713,29 +12976,202 @@ function createAuthCli(authResource, getUpdateInfo2, authStorage2, envAccessToke
   return cli2;
 }
 
+// src/commands/balances/index.tsx
+import { Cli as Cli2 } from "incur";
+
+// src/utils/require-auth.ts
+var NOT_AUTHENTICATED_ERROR = {
+  code: "NOT_AUTHENTICATED",
+  message: 'Not authenticated. Run "link-cli auth login" first.',
+  cta: {
+    commands: [{ command: "auth login", description: "Log in to Link" }]
+  }
+};
+function requireAuth(authStorage2, envAccessToken2) {
+  const store = authStorage2 ?? storage;
+  return (c, next) => {
+    if (!envAccessToken2 && !store.isAuthenticated()) {
+      return c.error(NOT_AUTHENTICATED_ERROR);
+    }
+    return next();
+  };
+}
+function requireAuthGuard(c, authStorage2, envAccessToken2) {
+  const store = authStorage2 ?? storage;
+  if (!envAccessToken2 && !store.isAuthenticated()) {
+    c.error(NOT_AUTHENTICATED_ERROR);
+  }
+}
+
+// src/commands/balances/list.tsx
+import { Box as Box4, Text as Text5 } from "ink";
+import Spinner3 from "ink-spinner";
+import { useCallback as useCallback2 } from "react";
+import { jsx as jsx5, jsxs as jsxs4 } from "react/jsx-runtime";
+var COLUMN_GAP = "  ";
+var SOURCE_ID_MIN = 16;
+var SOURCE_ID_MAX = 48;
+var TYPE_WIDTH = 12;
+var CURRENT_WIDTH = 15;
+var CURRENCY_WIDTH = 8;
+function truncateCell(value, width) {
+  if (value.length <= width) {
+    return value;
+  }
+  if (width <= 3) {
+    return value.slice(0, width);
+  }
+  return `${value.slice(0, width - 3)}...`;
+}
+function formatCell(value, width) {
+  return truncateCell(value, width).padEnd(width);
+}
+function formatCents(cents) {
+  const dollars = Math.abs(cents) / 100;
+  const formatted = `$${dollars.toFixed(2)}`;
+  return cents < 0 ? `-${formatted}` : formatted;
+}
+function sourceIdWidth(balances) {
+  if (balances.length === 0) return SOURCE_ID_MIN;
+  const maxLen = Math.max(...balances.map((b) => (b.source_id ?? "").length));
+  return Math.min(SOURCE_ID_MAX, Math.max(SOURCE_ID_MIN, maxLen));
+}
+var BalancesList = ({
+  resource,
+  params,
+  onComplete
+}) => {
+  const action = useCallback2(
+    () => resource.listBalances(params),
+    [resource, params]
+  );
+  const { status, data: page, error } = useAsyncAction(action, onComplete);
+  const balances = page?.data ?? [];
+  const nextCursor = page?.has_more && balances.length > 0 ? balances[balances.length - 1].source_id : null;
+  const idWidth = sourceIdWidth(balances);
+  const headerRow = [
+    formatCell("Source ID", idWidth),
+    formatCell("Balance type", TYPE_WIDTH),
+    formatCell("Current balance", CURRENT_WIDTH),
+    formatCell("Currency", CURRENCY_WIDTH)
+  ].join(COLUMN_GAP);
+  const separatorRow = "-".repeat(headerRow.length);
+  const rows = balances.map(
+    (balance) => [
+      formatCell(balance.source_id ?? "-", idWidth),
+      formatCell(balance.type ?? "-", TYPE_WIDTH),
+      formatCell(
+        balance.current != null ? formatCents(balance.current) : "-",
+        CURRENT_WIDTH
+      ),
+      formatCell(balance.currency ?? "-", CURRENCY_WIDTH)
+    ].join(COLUMN_GAP)
+  );
+  if (status === "loading") {
+    return /* @__PURE__ */ jsx5(Box4, { children: /* @__PURE__ */ jsxs4(Text5, { color: "cyan", children: [
+      /* @__PURE__ */ jsx5(Spinner3, { type: "dots" }),
+      " Loading balances..."
+    ] }) });
+  }
+  if (status === "error") {
+    return /* @__PURE__ */ jsxs4(Box4, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx5(Text5, { color: "red", children: "Failed to load balances" }),
+      /* @__PURE__ */ jsx5(Text5, { color: "red", children: error })
+    ] });
+  }
+  if (balances.length === 0) {
+    return /* @__PURE__ */ jsx5(Box4, { children: /* @__PURE__ */ jsx5(Text5, { dimColor: true, children: "No balances found" }) });
+  }
+  return /* @__PURE__ */ jsxs4(Box4, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx5(Text5, { bold: true, children: "Balances" }),
+    /* @__PURE__ */ jsxs4(Box4, { flexDirection: "column", marginTop: 1, paddingX: 2, children: [
+      /* @__PURE__ */ jsx5(Text5, { bold: true, children: headerRow }),
+      /* @__PURE__ */ jsx5(Text5, { dimColor: true, children: separatorRow }),
+      rows.map((row, index) => /* @__PURE__ */ jsx5(Text5, { children: row }, balances[index].source_id ?? `balance-${index}`))
+    ] }),
+    page?.has_more !== void 0 ? /* @__PURE__ */ jsxs4(Box4, { flexDirection: "column", marginTop: 1, children: [
+      /* @__PURE__ */ jsxs4(Text5, { dimColor: true, children: [
+        "has_more: ",
+        String(page.has_more)
+      ] }),
+      typeof nextCursor === "string" && nextCursor.length > 0 ? /* @__PURE__ */ jsx5(Text5, { dimColor: true, children: `next page: --starting-after ${nextCursor}` }) : null
+    ] }) : null
+  ] });
+};
+
+// src/commands/balances/schema.ts
+import { z as z2 } from "incur";
+var listOptions = z2.object({
+  source: z2.array(z2.string()).default([]).describe("Filter by source ID. Repeat to include multiple sources."),
+  limit: z2.coerce.number().int().positive().max(100).optional().describe("Maximum number of balances to return (1-100)."),
+  startingAfter: z2.string().optional().describe("Cursor: return balances after this balance ID."),
+  endingBefore: z2.string().optional().describe("Cursor: return balances before this balance ID.")
+});
+
+// src/commands/balances/index.tsx
+import { jsx as jsx6 } from "react/jsx-runtime";
+function createBalancesCli(createResource, authStorage2, envAccessToken2) {
+  const cli2 = Cli2.create("balances", {
+    description: "List balances from your Link wallet"
+  });
+  cli2.command("list", {
+    description: "List balances from your Link wallet",
+    options: listOptions,
+    outputPolicy: "agent-only",
+    middleware: [requireAuth(authStorage2, envAccessToken2)],
+    async run(c) {
+      const opts = c.options;
+      const resource = createResource();
+      const params = {};
+      if (opts.source.length > 0) params.sources = opts.source;
+      if (opts.limit !== void 0) params.limit = opts.limit;
+      if (opts.startingAfter !== void 0)
+        params.starting_after = opts.startingAfter;
+      if (opts.endingBefore !== void 0)
+        params.ending_before = opts.endingBefore;
+      if (!c.agent && !c.formatExplicit) {
+        return renderInteractive(
+          /* @__PURE__ */ jsx6(
+            BalancesList,
+            {
+              resource,
+              params,
+              onComplete: () => {
+              }
+            }
+          ),
+          () => resource.listBalances(params)
+        );
+      }
+      return resource.listBalances(params);
+    }
+  });
+  return cli2;
+}
+
 // src/commands/demo/index.tsx
-import { Cli as Cli2, z as z2 } from "incur";
+import { Cli as Cli3, z as z3 } from "incur";
 
 // src/commands/demo/demo-runner.tsx
-import { Box as Box8, Text as Text10, useApp, useInput as useInput4 } from "ink";
-import { useCallback as useCallback2, useState as useState7 } from "react";
+import { Box as Box9, Text as Text11, useApp, useInput as useInput4 } from "ink";
+import { useCallback as useCallback3, useState as useState7 } from "react";
 
 // src/utils/markdown-text.tsx
-import { Text as Text5 } from "ink";
-import { jsx as jsx5 } from "react/jsx-runtime";
+import { Text as Text6 } from "ink";
+import { jsx as jsx7 } from "react/jsx-runtime";
 var MarkdownText = ({
   children,
   dimColor
 }) => {
   const parts = tokenize(children);
-  return /* @__PURE__ */ jsx5(Text5, { dimColor, children: parts.map((part) => {
+  return /* @__PURE__ */ jsx7(Text6, { dimColor, children: parts.map((part) => {
     if (part.type === "bold") {
-      return /* @__PURE__ */ jsx5(Text5, { bold: true, children: part.text }, part.key);
+      return /* @__PURE__ */ jsx7(Text6, { bold: true, children: part.text }, part.key);
     }
     if (part.type === "code") {
-      return /* @__PURE__ */ jsx5(Text5, { color: "yellow", children: part.text }, part.key);
+      return /* @__PURE__ */ jsx7(Text6, { color: "yellow", children: part.text }, part.key);
     }
-    return /* @__PURE__ */ jsx5(Text5, { children: part.text }, part.key);
+    return /* @__PURE__ */ jsx7(Text6, { children: part.text }, part.key);
   }) });
 };
 function tokenize(input) {
@@ -12770,7 +13206,7 @@ function tokenize(input) {
 }
 
 // src/commands/spend-request/app-download-qr-codes.tsx
-import { Box as Box4, Text as Text6 } from "ink";
+import { Box as Box5, Text as Text7 } from "ink";
 import { useMemo } from "react";
 
 // src/utils/render-qr-matrix.ts
@@ -12807,24 +13243,24 @@ function renderQrMatrix(url) {
 }
 
 // src/commands/spend-request/app-download-qr-codes.tsx
-import { jsx as jsx6, jsxs as jsxs4 } from "react/jsx-runtime";
+import { jsx as jsx8, jsxs as jsxs5 } from "react/jsx-runtime";
 var DOWNLOAD_URL = "https://link.com/download";
 var AppDownloadQrCodes = () => {
   const qrLines = useMemo(() => renderQrMatrix(DOWNLOAD_URL), []);
-  return /* @__PURE__ */ jsxs4(Box4, { flexDirection: "column", marginTop: 1, children: [
-    /* @__PURE__ */ jsx6(Text6, { dimColor: true, children: "Get the Link app to approve spend requests from your phone" }),
-    /* @__PURE__ */ jsxs4(Box4, { flexDirection: "column", alignItems: "flex-start", marginTop: 1, children: [
+  return /* @__PURE__ */ jsxs5(Box5, { flexDirection: "column", marginTop: 1, children: [
+    /* @__PURE__ */ jsx8(Text7, { dimColor: true, children: "Get the Link app to approve spend requests from your phone" }),
+    /* @__PURE__ */ jsxs5(Box5, { flexDirection: "column", alignItems: "flex-start", marginTop: 1, children: [
       qrLines.map((line, i) => (
         // biome-ignore lint/suspicious/noArrayIndexKey: stable static array
-        /* @__PURE__ */ jsx6(Text6, { children: line }, i)
+        /* @__PURE__ */ jsx8(Text7, { children: line }, i)
       )),
-      /* @__PURE__ */ jsx6(Text6, { dimColor: true, children: DOWNLOAD_URL })
+      /* @__PURE__ */ jsx8(Text7, { dimColor: true, children: DOWNLOAD_URL })
     ] })
   ] });
 };
 
 // src/commands/demo/card-flow.tsx
-import { Box as Box5, Text as Text7, useInput as useInput2 } from "ink";
+import { Box as Box6, Text as Text8, useInput as useInput2 } from "ink";
 import { useEffect as useEffect4, useRef as useRef2, useState as useState4 } from "react";
 
 // src/utils/poll-until-approved.ts
@@ -12989,7 +13425,7 @@ var ONBOARD = {
 };
 
 // src/commands/demo/card-flow.tsx
-import { Fragment, jsx as jsx7, jsxs as jsxs5 } from "react/jsx-runtime";
+import { Fragment, jsx as jsx9, jsxs as jsxs6 } from "react/jsx-runtime";
 function formatPmLabel(pm) {
   return `${pm.card_details?.brand ?? pm.type} ****${pm.card_details?.last4 ?? ""}`;
 }
@@ -13173,22 +13609,22 @@ var CardFlow = ({
     ];
     return order.indexOf(step) > order.indexOf(target);
   };
-  const prompt = (label = "Press [Enter] to continue") => /* @__PURE__ */ jsxs5(Text7, { dimColor: true, children: [
+  const prompt = (label = "Press [Enter] to continue") => /* @__PURE__ */ jsxs6(Text8, { dimColor: true, children: [
     "\n",
     ">",
     " ",
     label
   ] });
-  return /* @__PURE__ */ jsxs5(Box5, { flexDirection: "column", gap: 1, children: [
-    /* @__PURE__ */ jsx7(Text7, { bold: true, color: "cyan", children: CARD_FLOW.title }),
-    /* @__PURE__ */ jsxs5(Box5, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsxs5(Box5, { flexDirection: "row", gap: 1, children: [
-        /* @__PURE__ */ jsx7(Text7, { color: "yellow", children: "[testmode]" }),
-        /* @__PURE__ */ jsx7(Text7, { dimColor: true, children: DEMO_MERCHANT_URL })
+  return /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", gap: 1, children: [
+    /* @__PURE__ */ jsx9(Text8, { bold: true, color: "cyan", children: CARD_FLOW.title }),
+    /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsxs6(Box6, { flexDirection: "row", gap: 1, children: [
+        /* @__PURE__ */ jsx9(Text8, { color: "yellow", children: "[testmode]" }),
+        /* @__PURE__ */ jsx9(Text8, { dimColor: true, children: DEMO_MERCHANT_URL })
       ] }),
-      /* @__PURE__ */ jsx7(MarkdownText, { children: CARD_FLOW.intro.description }),
-      /* @__PURE__ */ jsxs5(Box5, { marginTop: 1, flexDirection: "column", children: [
-        /* @__PURE__ */ jsx7(Text7, { children: "What happens:" }),
+      /* @__PURE__ */ jsx9(MarkdownText, { children: CARD_FLOW.intro.description }),
+      /* @__PURE__ */ jsxs6(Box6, { marginTop: 1, flexDirection: "column", children: [
+        /* @__PURE__ */ jsx9(Text8, { children: "What happens:" }),
         CARD_FLOW.intro.steps.map((s, i) => {
           const doneAfter = [
             "pick-pm",
@@ -13204,17 +13640,17 @@ var CardFlow = ({
           ];
           const done = pastStep(doneAfter[i]);
           const active = !done && (step === activeFrom[i] || pastStep(activeFrom[i]));
-          return done ? /* @__PURE__ */ jsxs5(Text7, { dimColor: true, strikethrough: true, children: [
+          return done ? /* @__PURE__ */ jsxs6(Text8, { dimColor: true, strikethrough: true, children: [
             " ",
             i + 1,
             ". ",
             s
-          ] }, s) : active ? /* @__PURE__ */ jsxs5(Text7, { bold: true, color: "cyan", children: [
+          ] }, s) : active ? /* @__PURE__ */ jsxs6(Text8, { bold: true, color: "cyan", children: [
             " ",
             i + 1,
             ". ",
             s
-          ] }, s) : /* @__PURE__ */ jsxs5(Text7, { dimColor: true, children: [
+          ] }, s) : /* @__PURE__ */ jsxs6(Text8, { dimColor: true, children: [
             " ",
             i + 1,
             ". ",
@@ -13224,45 +13660,45 @@ var CardFlow = ({
       ] }),
       step === "intro" && prompt(CARD_FLOW.intro.prompt)
     ] }),
-    step === "fetch-pm" && /* @__PURE__ */ jsx7(Box5, { flexDirection: "column", children: /* @__PURE__ */ jsx7(Text7, { dimColor: true, children: "Fetching payment methods from your Link wallet..." }) }),
-    (step === "pick-pm" || step === "explain-pm") && /* @__PURE__ */ jsxs5(Box5, { flexDirection: "column", children: [
-      step === "pick-pm" && paymentMethods.length > 1 && /* @__PURE__ */ jsxs5(Box5, { flexDirection: "column", children: [
-        /* @__PURE__ */ jsx7(Text7, { children: "Which payment method should we use for the demo?" }),
-        /* @__PURE__ */ jsx7(Box5, { flexDirection: "column", marginTop: 1, children: paymentMethods.map((pm, i) => /* @__PURE__ */ jsx7(Text7, { children: i === selectedPmIndex ? /* @__PURE__ */ jsxs5(Text7, { color: "cyan", bold: true, children: [
+    step === "fetch-pm" && /* @__PURE__ */ jsx9(Box6, { flexDirection: "column", children: /* @__PURE__ */ jsx9(Text8, { dimColor: true, children: "Fetching payment methods from your Link wallet..." }) }),
+    (step === "pick-pm" || step === "explain-pm") && /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", children: [
+      step === "pick-pm" && paymentMethods.length > 1 && /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", children: [
+        /* @__PURE__ */ jsx9(Text8, { children: "Which payment method should we use for the demo?" }),
+        /* @__PURE__ */ jsx9(Box6, { flexDirection: "column", marginTop: 1, children: paymentMethods.map((pm, i) => /* @__PURE__ */ jsx9(Text8, { children: i === selectedPmIndex ? /* @__PURE__ */ jsxs6(Text8, { color: "cyan", bold: true, children: [
           ">",
           " ",
           formatPmLabel(pm),
           pm.is_default ? " (default)" : ""
-        ] }) : /* @__PURE__ */ jsxs5(Text7, { dimColor: true, children: [
+        ] }) : /* @__PURE__ */ jsxs6(Text8, { dimColor: true, children: [
           "  ",
           formatPmLabel(pm),
           pm.is_default ? " (default)" : ""
         ] }) }, pm.id)) }),
-        /* @__PURE__ */ jsx7(Box5, { marginTop: 1, children: /* @__PURE__ */ jsx7(Text7, { dimColor: true, children: "Use \u2191\u2193 to select, [Enter] to confirm" }) })
+        /* @__PURE__ */ jsx9(Box6, { marginTop: 1, children: /* @__PURE__ */ jsx9(Text8, { dimColor: true, children: "Use \u2191\u2193 to select, [Enter] to confirm" }) })
       ] }),
-      paymentMethod && /* @__PURE__ */ jsxs5(Box5, { flexDirection: "column", children: [
-        /* @__PURE__ */ jsxs5(Text7, { color: "green", children: [
+      paymentMethod && /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", children: [
+        /* @__PURE__ */ jsxs6(Text8, { color: "green", children: [
           "\u2713 Using ",
-          /* @__PURE__ */ jsx7(Text7, { bold: true, children: pmLabel }),
+          /* @__PURE__ */ jsx9(Text8, { bold: true, children: pmLabel }),
           paymentMethod.is_default ? " (default)" : ""
         ] }),
         step === "explain-pm" && prompt(CARD_FLOW.explainPm.prompt)
       ] })
     ] }),
-    step === "create-spend" && /* @__PURE__ */ jsxs5(Box5, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsx7(MarkdownText, { children: CARD_FLOW.createSpend.description }),
-      /* @__PURE__ */ jsx7(Box5, { marginY: 1, children: /* @__PURE__ */ jsx7(Text7, { color: "cyan", children: CARD_FLOW.createSpend.loading }) })
+    step === "create-spend" && /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx9(MarkdownText, { children: CARD_FLOW.createSpend.description }),
+      /* @__PURE__ */ jsx9(Box6, { marginY: 1, children: /* @__PURE__ */ jsx9(Text8, { color: "cyan", children: CARD_FLOW.createSpend.loading }) })
     ] }),
-    (step === "await-approval" || step === "approval-timeout") && spendRequest && /* @__PURE__ */ jsxs5(Box5, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsxs5(Text7, { color: "green", children: [
+    (step === "await-approval" || step === "approval-timeout") && spendRequest && /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsxs6(Text8, { color: "green", children: [
         "\u2713 Spend request created (",
         spendRequest.id,
         ")"
       ] }),
-      step === "await-approval" && /* @__PURE__ */ jsxs5(Fragment, { children: [
-        /* @__PURE__ */ jsx7(Text7, { children: CARD_FLOW.approval.description }),
-        /* @__PURE__ */ jsxs5(
-          Box5,
+      step === "await-approval" && /* @__PURE__ */ jsxs6(Fragment, { children: [
+        /* @__PURE__ */ jsx9(Text8, { children: CARD_FLOW.approval.description }),
+        /* @__PURE__ */ jsxs6(
+          Box6,
           {
             flexDirection: "column",
             borderStyle: "round",
@@ -13271,21 +13707,21 @@ var CardFlow = ({
             paddingY: 1,
             marginTop: 1,
             children: [
-              /* @__PURE__ */ jsxs5(Text7, { children: [
+              /* @__PURE__ */ jsxs6(Text8, { children: [
                 "Approve at:",
                 " ",
-                /* @__PURE__ */ jsx7(Text7, { bold: true, color: "cyan", children: approvalUrl })
+                /* @__PURE__ */ jsx9(Text8, { bold: true, color: "cyan", children: approvalUrl })
               ] }),
-              /* @__PURE__ */ jsx7(Text7, { dimColor: true, children: CARD_FLOW.approval.browserHint })
+              /* @__PURE__ */ jsx9(Text8, { dimColor: true, children: CARD_FLOW.approval.browserHint })
             ]
           }
         ),
-        /* @__PURE__ */ jsx7(Box5, { marginY: 1, children: /* @__PURE__ */ jsx7(Text7, { color: "cyan", children: CARD_FLOW.approval.loading }) })
+        /* @__PURE__ */ jsx9(Box6, { marginY: 1, children: /* @__PURE__ */ jsx9(Text8, { color: "cyan", children: CARD_FLOW.approval.loading }) })
       ] }),
-      step === "approval-timeout" && /* @__PURE__ */ jsxs5(Fragment, { children: [
-        /* @__PURE__ */ jsx7(Text7, { color: "yellow", children: "\u26A0 Approval timed out (5 min). Still pending \u2014 you can still approve." }),
-        /* @__PURE__ */ jsxs5(
-          Box5,
+      step === "approval-timeout" && /* @__PURE__ */ jsxs6(Fragment, { children: [
+        /* @__PURE__ */ jsx9(Text8, { color: "yellow", children: "\u26A0 Approval timed out (5 min). Still pending \u2014 you can still approve." }),
+        /* @__PURE__ */ jsxs6(
+          Box6,
           {
             flexDirection: "column",
             borderStyle: "round",
@@ -13294,38 +13730,38 @@ var CardFlow = ({
             paddingY: 1,
             marginTop: 1,
             children: [
-              /* @__PURE__ */ jsxs5(Text7, { children: [
+              /* @__PURE__ */ jsxs6(Text8, { children: [
                 "Approve at:",
                 " ",
-                /* @__PURE__ */ jsx7(Text7, { bold: true, color: "cyan", children: approvalUrl })
+                /* @__PURE__ */ jsx9(Text8, { bold: true, color: "cyan", children: approvalUrl })
               ] }),
-              /* @__PURE__ */ jsx7(Text7, { dimColor: true, children: "Press [Enter] to open in browser" })
+              /* @__PURE__ */ jsx9(Text8, { dimColor: true, children: "Press [Enter] to open in browser" })
             ]
           }
         ),
-        /* @__PURE__ */ jsx7(Box5, { marginTop: 1, children: /* @__PURE__ */ jsx7(Text7, { dimColor: true, children: "r Retry polling q Quit demo" }) })
+        /* @__PURE__ */ jsx9(Box6, { marginTop: 1, children: /* @__PURE__ */ jsx9(Text8, { dimColor: true, children: "r Retry polling q Quit demo" }) })
       ] })
     ] }),
-    (step === "show-card" || step === "open-url" || step === "done") && card && /* @__PURE__ */ jsxs5(Box5, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsx7(Text7, { color: "green", children: "\u2713 Approved!" }),
-      /* @__PURE__ */ jsx7(MarkdownText, { children: CARD_FLOW.showCard.description }),
-      /* @__PURE__ */ jsx7(Box5, { flexDirection: "column", paddingX: 2, marginTop: 1, children: /* @__PURE__ */ jsxs5(Text7, { children: [
-        /* @__PURE__ */ jsx7(Text7, { dimColor: true, children: "Number " }),
-        /* @__PURE__ */ jsx7(Text7, { bold: true, children: formatCardNumber(card.number) }),
+    (step === "show-card" || step === "open-url" || step === "done") && card && /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx9(Text8, { color: "green", children: "\u2713 Approved!" }),
+      /* @__PURE__ */ jsx9(MarkdownText, { children: CARD_FLOW.showCard.description }),
+      /* @__PURE__ */ jsx9(Box6, { flexDirection: "column", paddingX: 2, marginTop: 1, children: /* @__PURE__ */ jsxs6(Text8, { children: [
+        /* @__PURE__ */ jsx9(Text8, { dimColor: true, children: "Number " }),
+        /* @__PURE__ */ jsx9(Text8, { bold: true, children: formatCardNumber(card.number) }),
         "  ",
-        /* @__PURE__ */ jsx7(Text7, { dimColor: true, children: "Exp " }),
-        /* @__PURE__ */ jsx7(Text7, { bold: true, children: formatExpiry(card.exp_month, card.exp_year) }),
+        /* @__PURE__ */ jsx9(Text8, { dimColor: true, children: "Exp " }),
+        /* @__PURE__ */ jsx9(Text8, { bold: true, children: formatExpiry(card.exp_month, card.exp_year) }),
         "  ",
-        /* @__PURE__ */ jsx7(Text7, { dimColor: true, children: "CVC " }),
-        /* @__PURE__ */ jsx7(Text7, { bold: true, children: card.cvc }),
-        card.billing_address?.postal_code && /* @__PURE__ */ jsxs5(Fragment, { children: [
+        /* @__PURE__ */ jsx9(Text8, { dimColor: true, children: "CVC " }),
+        /* @__PURE__ */ jsx9(Text8, { bold: true, children: card.cvc }),
+        card.billing_address?.postal_code && /* @__PURE__ */ jsxs6(Fragment, { children: [
           "  ",
-          /* @__PURE__ */ jsx7(Text7, { dimColor: true, children: "Zip " }),
-          /* @__PURE__ */ jsx7(Text7, { bold: true, children: card.billing_address.postal_code })
+          /* @__PURE__ */ jsx9(Text8, { dimColor: true, children: "Zip " }),
+          /* @__PURE__ */ jsx9(Text8, { bold: true, children: card.billing_address.postal_code })
         ] }),
-        card.valid_until && /* @__PURE__ */ jsxs5(Fragment, { children: [
+        card.valid_until && /* @__PURE__ */ jsxs6(Fragment, { children: [
           "  ",
-          /* @__PURE__ */ jsxs5(Text7, { dimColor: true, children: [
+          /* @__PURE__ */ jsxs6(Text8, { dimColor: true, children: [
             "expires",
             " ",
             new Date(card.valid_until).toLocaleTimeString([], {
@@ -13337,14 +13773,14 @@ var CardFlow = ({
       ] }) }),
       step === "show-card" && prompt(CARD_FLOW.showCard.prompt)
     ] }),
-    step === "done" && /* @__PURE__ */ jsxs5(Box5, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsxs5(Text7, { color: "green", children: [
+    step === "done" && /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsxs6(Text8, { color: "green", children: [
         "\u2713 ",
         CARD_FLOW.done.success
       ] }),
-      /* @__PURE__ */ jsx7(Text7, { children: CARD_FLOW.done.detail })
+      /* @__PURE__ */ jsx9(Text8, { children: CARD_FLOW.done.detail })
     ] }),
-    step === "error" && /* @__PURE__ */ jsxs5(Text7, { color: "red", children: [
+    step === "error" && /* @__PURE__ */ jsxs6(Text8, { color: "red", children: [
       "Error: ",
       error
     ] })
@@ -13352,7 +13788,7 @@ var CardFlow = ({
 };
 
 // src/commands/demo/spt-flow.tsx
-import { Box as Box7, Text as Text9, useInput as useInput3 } from "ink";
+import { Box as Box8, Text as Text10, useInput as useInput3 } from "ink";
 import { useEffect as useEffect6, useRef as useRef3, useState as useState6 } from "react";
 
 // src/commands/mpp/decode.ts
@@ -13385,11 +13821,11 @@ function getMethodDetails(request) {
 }
 function resolveStripeChallenge(challenges) {
   const stripeChallenge = challenges.find(
-    (challenge) => challenge.method === "stripe" && challenge.intent === "charge"
+    (challenge) => challenge.method === "stripe" && (challenge.intent === "charge" || challenge.intent === "session")
   );
   if (!stripeChallenge) {
     throw new Error(
-      "WWW-Authenticate header does not include a stripe charge challenge"
+      "WWW-Authenticate header does not include a stripe charge or session challenge"
     );
   }
   if (typeof stripeChallenge.request !== "object" || stripeChallenge.request == null || Array.isArray(stripeChallenge.request)) {
@@ -13424,7 +13860,7 @@ function decodeStripeChallenge(challengeHeader) {
     id: challenge.id,
     realm: challenge.realm,
     method: "stripe",
-    intent: "charge",
+    intent: challenge.intent,
     description: challenge.description,
     digest: challenge.digest,
     expires: challenge.expires,
@@ -13434,13 +13870,13 @@ function decodeStripeChallenge(challengeHeader) {
 }
 
 // src/commands/mpp/pay.tsx
-import { Box as Box6, Text as Text8 } from "ink";
-import Spinner3 from "ink-spinner";
+import { Box as Box7, Text as Text9 } from "ink";
+import Spinner4 from "ink-spinner";
 import { Credential, Method } from "mppx";
 import { Mppx, Transport } from "mppx/client";
 import { Methods as StripeMethods } from "mppx/stripe";
 import { useEffect as useEffect5, useState as useState5 } from "react";
-import { jsx as jsx8, jsxs as jsxs6 } from "react/jsx-runtime";
+import { jsx as jsx10, jsxs as jsxs7 } from "react/jsx-runtime";
 function buildHeaders(data, headers) {
   const result = {};
   if (data !== void 0) {
@@ -13469,8 +13905,19 @@ function createStripePaymentClient(spt) {
       });
     }
   });
+  const stripeSession = Method.toClient(
+    { ...StripeMethods.charge, intent: "session" },
+    {
+      async createCredential({ challenge }) {
+        return Credential.serialize({
+          challenge,
+          payload: { action: "open", grantedToken: spt }
+        });
+      }
+    }
+  );
   return Mppx.create({
-    methods: [stripeCharge],
+    methods: [stripeCharge, stripeSession],
     polyfill: false,
     transport: Transport.from({
       name: "stripe-http",
@@ -13488,7 +13935,7 @@ function createStripePaymentClient(spt) {
     })
   });
 }
-async function runMppPay(url, spendRequestId, method, data, headers, repository) {
+async function runMppPayWithSpendRequest(url, spendRequestId, method, data, headers, repository) {
   const spendRequest = await repository.getSpendRequest(spendRequestId, {
     include: ["shared_payment_token"]
   });
@@ -13509,7 +13956,15 @@ async function runMppPay(url, spendRequestId, method, data, headers, repository)
   if (!spendRequest.shared_payment_token) {
     throw new Error("Spend request does not have a shared payment token");
   }
-  const spt = spendRequest.shared_payment_token.id;
+  return payWithSpt(
+    url,
+    spendRequest.shared_payment_token.id,
+    method,
+    data,
+    headers
+  );
+}
+async function payWithSpt(url, spt, method, data, headers) {
   const httpMethod = method ?? (data !== void 0 ? "POST" : "GET");
   const requestHeaders = buildHeaders(data, headers);
   const initialResponse = await fetch(url, {
@@ -13529,7 +13984,102 @@ async function runMppPay(url, spendRequestId, method, data, headers, repository)
       Authorization: authHeader
     }
   });
-  return readPayResult(retryResponse);
+  return readPayResult(retryResponse);
+}
+async function runMppPayFullFlow(opts) {
+  const {
+    url,
+    method,
+    data,
+    headers,
+    context,
+    amountOverride,
+    paymentMethodId,
+    test,
+    repository,
+    paymentMethodsFactory,
+    onStep,
+    onApprovalUrl
+  } = opts;
+  const httpMethod = method ?? (data !== void 0 ? "POST" : "GET");
+  const requestHeaders = buildHeaders(data, headers);
+  onStep?.("probing");
+  const probeResponse = await fetch(url, {
+    method: httpMethod,
+    body: data,
+    headers: requestHeaders
+  });
+  if (probeResponse.status !== 402) {
+    return readPayResult(probeResponse);
+  }
+  const wwwAuth = probeResponse.headers.get("www-authenticate");
+  if (!wwwAuth) {
+    throw new Error("URL returned 402 but no WWW-Authenticate header");
+  }
+  const decoded = decodeStripeChallenge(wwwAuth);
+  const networkId = decoded.network_id;
+  const challengeAmount = decoded.request_json.amount ? Number(decoded.request_json.amount) : void 0;
+  const challengeCurrency = decoded.request_json.currency ?? "usd";
+  const amount = amountOverride ?? challengeAmount;
+  if (!amount) {
+    throw new Error(
+      "Could not determine amount from 402 challenge. Pass --amount explicitly."
+    );
+  }
+  let pmId = paymentMethodId;
+  if (!pmId) {
+    onStep?.("creating");
+    const pmResource = paymentMethodsFactory();
+    const methods = await pmResource.list();
+    if (!methods.length) {
+      throw new Error(
+        "No payment methods found. Add one with `link-cli payment-methods add`."
+      );
+    }
+    pmId = methods[0].id;
+  }
+  onStep?.("creating");
+  const spendRequest = await repository.createSpendRequest({
+    payment_details: pmId,
+    credential_type: "shared_payment_token",
+    network_id: networkId,
+    amount,
+    currency: challengeCurrency,
+    context,
+    request_approval: true,
+    test: test || void 0
+  });
+  onStep?.("approving");
+  if (spendRequest.approval_url) {
+    onApprovalUrl?.(spendRequest.approval_url);
+  }
+  const approved = await pollUntilApproved(repository, spendRequest.id);
+  if (approved.status !== "approved") {
+    throw new Error(
+      `Spend request was not approved (status: ${approved.status})`
+    );
+  }
+  onStep?.("signing");
+  let withSpt = await repository.getSpendRequest(spendRequest.id, {
+    include: ["shared_payment_token"]
+  });
+  for (let i = 0; i < 3 && withSpt && !withSpt.shared_payment_token; i++) {
+    await new Promise((r) => setTimeout(r, 1e3));
+    withSpt = await repository.getSpendRequest(spendRequest.id, {
+      include: ["shared_payment_token"]
+    });
+  }
+  if (!withSpt?.shared_payment_token) {
+    throw new Error("Failed to retrieve shared payment token");
+  }
+  onStep?.("submitting");
+  return payWithSpt(
+    url,
+    withSpt.shared_payment_token.id,
+    method,
+    data,
+    headers
+  );
 }
 function MppPay({
   url,
@@ -13537,66 +14087,55 @@ function MppPay({
   method,
   data,
   headers,
+  context,
+  amountOverride,
+  paymentMethodId,
+  test,
   repository,
+  paymentMethodsFactory,
   onComplete
 }) {
-  const [step, setStep] = useState5("retrieving");
+  const [step, setStep] = useState5(
+    spendRequestId ? "signing" : "probing"
+  );
   const [result, setResult] = useState5(null);
   const [error, setError] = useState5(null);
+  const [approvalUrl, setApprovalUrl] = useState5(null);
   useEffect5(() => {
     (async () => {
       try {
-        setStep("retrieving");
-        const spendRequest = await repository.getSpendRequest(spendRequestId, {
-          include: ["shared_payment_token"]
-        });
-        if (!spendRequest) {
-          throw new Error(`Spend request ${spendRequestId} not found`);
-        }
-        if (spendRequest.credential_type !== "shared_payment_token") {
-          const type = spendRequest.credential_type ?? "card";
-          throw new Error(
-            `Spend request ${spendRequestId} must have credential_type 'shared_payment_token' (current: '${type}')`
+        let payResult;
+        if (spendRequestId) {
+          setStep("signing");
+          payResult = await runMppPayWithSpendRequest(
+            url,
+            spendRequestId,
+            method,
+            data,
+            headers,
+            repository
           );
-        }
-        if (spendRequest.status !== "approved") {
-          throw new Error(
-            `Spend request must be approved (current status: ${spendRequest.status})`
-          );
-        }
-        if (!spendRequest.shared_payment_token) {
-          throw new Error("Spend request does not have a shared payment token");
-        }
-        const spt = spendRequest.shared_payment_token.id;
-        const httpMethod = method ?? (data !== void 0 ? "POST" : "GET");
-        const requestHeaders = buildHeaders(data, headers);
-        setStep("probing");
-        const initialResponse = await fetch(url, {
-          method: httpMethod,
-          body: data,
-          headers: requestHeaders
-        });
-        if (initialResponse.status !== 402) {
-          const payResult2 = await readPayResult(initialResponse);
-          setResult(payResult2);
-          setStep("done");
-          onComplete(payResult2);
-          return;
-        }
-        setStep("signing");
-        const authHeader = await createStripePaymentClient(spt).createCredential(
-          initialResponse
-        );
-        setStep("submitting");
-        const retryResponse = await fetch(url, {
-          method: httpMethod,
-          body: data,
-          headers: {
-            ...requestHeaders,
-            Authorization: authHeader
+        } else {
+          if (!context) {
+            throw new Error(
+              "--context is required for the full MPP flow (min 100 chars)"
+            );
           }
-        });
-        const payResult = await readPayResult(retryResponse);
+          payResult = await runMppPayFullFlow({
+            url,
+            method,
+            data,
+            headers,
+            context,
+            amountOverride,
+            paymentMethodId,
+            test: test ?? false,
+            repository,
+            paymentMethodsFactory,
+            onStep: setStep,
+            onApprovalUrl: (u) => setApprovalUrl(u)
+          });
+        }
         setResult(payResult);
         setStep("done");
         onComplete(payResult);
@@ -13605,30 +14144,51 @@ function MppPay({
         onComplete(null);
       }
     })();
-  }, [url, spendRequestId, method, data, headers, repository, onComplete]);
+  }, [
+    url,
+    spendRequestId,
+    method,
+    data,
+    headers,
+    context,
+    amountOverride,
+    paymentMethodId,
+    test,
+    repository,
+    paymentMethodsFactory,
+    onComplete
+  ]);
   const stepLabels = {
-    retrieving: "Retrieving spend request",
-    probing: "Probing URL",
+    probing: "Probing URL for 402 challenge",
+    creating: "Creating spend request",
+    approving: "Waiting for approval",
     signing: "Signing credential",
     submitting: "Submitting payment",
     done: "Done"
   };
   if (error) {
-    return /* @__PURE__ */ jsxs6(Text8, { color: "red", children: [
+    return /* @__PURE__ */ jsxs7(Text9, { color: "red", children: [
       "Error: ",
       error
     ] });
   }
-  return /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", children: [
-    step !== "done" && /* @__PURE__ */ jsx8(Box6, { children: /* @__PURE__ */ jsxs6(Text8, { color: "cyan", children: [
-      /* @__PURE__ */ jsx8(Spinner3, { type: "dots" }),
-      " ",
-      stepLabels[step],
-      "..."
-    ] }) }),
-    result && /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsxs6(
-        Text8,
+  return /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", children: [
+    step !== "done" && /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx10(Box7, { children: /* @__PURE__ */ jsxs7(Text9, { color: "cyan", children: [
+        /* @__PURE__ */ jsx10(Spinner4, { type: "dots" }),
+        " ",
+        stepLabels[step],
+        "..."
+      ] }) }),
+      step === "approving" && approvalUrl && /* @__PURE__ */ jsx10(Box7, { marginTop: 1, paddingX: 2, children: /* @__PURE__ */ jsxs7(Text9, { children: [
+        "Approve in Link app:",
+        " ",
+        /* @__PURE__ */ jsx10(Text9, { bold: true, color: "blue", children: approvalUrl })
+      ] }) })
+    ] }),
+    result && /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsxs7(
+        Text9,
         {
           color: result.status >= 400 ? "red" : result.status >= 300 ? "yellow" : "green",
           children: [
@@ -13637,13 +14197,13 @@ function MppPay({
           ]
         }
       ),
-      /* @__PURE__ */ jsx8(Text8, { children: result.body })
+      /* @__PURE__ */ jsx10(Text9, { children: result.body })
     ] })
   ] });
 }
 
 // src/commands/demo/spt-flow.tsx
-import { Fragment as Fragment2, jsx as jsx9, jsxs as jsxs7 } from "react/jsx-runtime";
+import { Fragment as Fragment2, jsx as jsx11, jsxs as jsxs8 } from "react/jsx-runtime";
 var SptFlow = ({
   spendRequestRepo: spendRequestRepo2,
   paymentMethodsResource,
@@ -13792,7 +14352,7 @@ var SptFlow = ({
         setStep("mpp-pay-gate");
         await waitForEnter();
         setStep("mpp-pay");
-        const payResponse = await runMppPay(
+        const payResponse = await runMppPayWithSpendRequest(
           DEMO_CLIMATE_API_URL,
           result.id,
           "POST",
@@ -13826,26 +14386,26 @@ var SptFlow = ({
     ];
     return order.indexOf(step) > order.indexOf(target);
   };
-  const prompt = (label = "Press [Enter] to continue") => /* @__PURE__ */ jsxs7(Text9, { dimColor: true, children: [
+  const prompt = (label = "Press [Enter] to continue") => /* @__PURE__ */ jsxs8(Text10, { dimColor: true, children: [
     "\n",
     ">",
     " ",
     label
   ] });
-  return /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", gap: 1, children: [
-    /* @__PURE__ */ jsx9(Text9, { bold: true, color: "cyan", children: SPT_FLOW.title }),
-    /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsxs7(Box7, { flexDirection: "row", gap: 1, children: [
-        /* @__PURE__ */ jsx9(Text9, { color: "yellow", children: "[testmode]" }),
-        /* @__PURE__ */ jsxs7(Text9, { dimColor: true, children: [
+  return /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", gap: 1, children: [
+    /* @__PURE__ */ jsx11(Text10, { bold: true, color: "cyan", children: SPT_FLOW.title }),
+    /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsxs8(Box8, { flexDirection: "row", gap: 1, children: [
+        /* @__PURE__ */ jsx11(Text10, { color: "yellow", children: "[testmode]" }),
+        /* @__PURE__ */ jsxs8(Text10, { dimColor: true, children: [
           DEMO_CLIMATE_API_URL,
           "  ",
           DEMO_MPP_DEV_URL
         ] })
       ] }),
-      /* @__PURE__ */ jsx9(MarkdownText, { children: SPT_FLOW.intro.description }),
-      /* @__PURE__ */ jsxs7(Box7, { marginTop: 1, flexDirection: "column", children: [
-        /* @__PURE__ */ jsx9(Text9, { children: SPT_FLOW.intro.preamble }),
+      /* @__PURE__ */ jsx11(MarkdownText, { children: SPT_FLOW.intro.description }),
+      /* @__PURE__ */ jsxs8(Box8, { marginTop: 1, flexDirection: "column", children: [
+        /* @__PURE__ */ jsx11(Text10, { children: SPT_FLOW.intro.preamble }),
         SPT_FLOW.intro.steps.map((s, i) => {
           const doneAfter = [
             "pick-pm",
@@ -13864,17 +14424,17 @@ var SptFlow = ({
           const done = pastStep(doneAfter[i]);
           const active = !done && (step === activeFrom[i] || pastStep(activeFrom[i]));
           const label = s.replace(/`/g, "");
-          return done ? /* @__PURE__ */ jsxs7(Text9, { dimColor: true, strikethrough: true, children: [
+          return done ? /* @__PURE__ */ jsxs8(Text10, { dimColor: true, strikethrough: true, children: [
             " ",
             i + 1,
             ". ",
             label
-          ] }, s) : active ? /* @__PURE__ */ jsxs7(Text9, { bold: true, color: "cyan", children: [
+          ] }, s) : active ? /* @__PURE__ */ jsxs8(Text10, { bold: true, color: "cyan", children: [
             " ",
             i + 1,
             ". ",
             label
-          ] }, s) : /* @__PURE__ */ jsxs7(Text9, { dimColor: true, children: [
+          ] }, s) : /* @__PURE__ */ jsxs8(Text10, { dimColor: true, children: [
             " ",
             i + 1,
             ". ",
@@ -13884,47 +14444,47 @@ var SptFlow = ({
       ] }),
       step === "intro" && prompt(SPT_FLOW.intro.prompt)
     ] }),
-    step === "fetch-pm" && /* @__PURE__ */ jsx9(Box7, { marginY: 1, children: /* @__PURE__ */ jsx9(Text9, { color: "cyan", children: "Fetching payment methods..." }) }),
-    step === "pick-pm" && paymentMethods.length > 1 && /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsx9(Text9, { children: "Which payment method should we use for the demo?" }),
-      /* @__PURE__ */ jsx9(Box7, { flexDirection: "column", marginTop: 1, children: paymentMethods.map((pm, i) => /* @__PURE__ */ jsx9(Text9, { children: i === selectedPmIndex ? /* @__PURE__ */ jsxs7(Text9, { color: "cyan", bold: true, children: [
+    step === "fetch-pm" && /* @__PURE__ */ jsx11(Box8, { marginY: 1, children: /* @__PURE__ */ jsx11(Text10, { color: "cyan", children: "Fetching payment methods..." }) }),
+    step === "pick-pm" && paymentMethods.length > 1 && /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx11(Text10, { children: "Which payment method should we use for the demo?" }),
+      /* @__PURE__ */ jsx11(Box8, { flexDirection: "column", marginTop: 1, children: paymentMethods.map((pm, i) => /* @__PURE__ */ jsx11(Text10, { children: i === selectedPmIndex ? /* @__PURE__ */ jsxs8(Text10, { color: "cyan", bold: true, children: [
         ">",
         " ",
         pm.card_details ? `${pm.card_details.brand} ****${pm.card_details.last4}` : pm.type,
         pm.is_default ? " (default)" : ""
-      ] }) : /* @__PURE__ */ jsxs7(Text9, { dimColor: true, children: [
+      ] }) : /* @__PURE__ */ jsxs8(Text10, { dimColor: true, children: [
         "  ",
         pm.card_details ? `${pm.card_details.brand} ****${pm.card_details.last4}` : pm.type,
         pm.is_default ? " (default)" : ""
       ] }) }, pm.id)) }),
-      /* @__PURE__ */ jsx9(Box7, { marginTop: 1, children: /* @__PURE__ */ jsx9(Text9, { dimColor: true, children: "Use \u2191\u2193 to select, [Enter] to confirm" }) })
+      /* @__PURE__ */ jsx11(Box8, { marginTop: 1, children: /* @__PURE__ */ jsx11(Text10, { dimColor: true, children: "Use \u2191\u2193 to select, [Enter] to confirm" }) })
     ] }),
-    (step === "probe" || step === "explain-402") && /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsx9(MarkdownText, { children: SPT_FLOW.probe.description }),
-      step === "probe" && /* @__PURE__ */ jsx9(Box7, { marginY: 1, children: /* @__PURE__ */ jsx9(Text9, { color: "cyan", children: SPT_FLOW.probe.loading }) }),
-      step === "explain-402" && networkId && /* @__PURE__ */ jsxs7(Fragment2, { children: [
-        /* @__PURE__ */ jsx9(MarkdownText, { children: SPT_FLOW.probe.detail }),
-        /* @__PURE__ */ jsxs7(Text9, { color: "green", children: [
+    (step === "probe" || step === "explain-402") && /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx11(MarkdownText, { children: SPT_FLOW.probe.description }),
+      step === "probe" && /* @__PURE__ */ jsx11(Box8, { marginY: 1, children: /* @__PURE__ */ jsx11(Text10, { color: "cyan", children: SPT_FLOW.probe.loading }) }),
+      step === "explain-402" && networkId && /* @__PURE__ */ jsxs8(Fragment2, { children: [
+        /* @__PURE__ */ jsx11(MarkdownText, { children: SPT_FLOW.probe.detail }),
+        /* @__PURE__ */ jsxs8(Text10, { color: "green", children: [
           "\u2713 Got HTTP 402 \u2014 network_id: ",
-          /* @__PURE__ */ jsx9(Text9, { bold: true, children: networkId })
+          /* @__PURE__ */ jsx11(Text10, { bold: true, children: networkId })
         ] }),
         prompt(SPT_FLOW.probe.prompt)
       ] })
     ] }),
-    step === "create-spend" && /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsx9(MarkdownText, { children: SPT_FLOW.createSpend.description }),
-      /* @__PURE__ */ jsx9(Box7, { marginY: 1, children: /* @__PURE__ */ jsx9(Text9, { color: "cyan", children: SPT_FLOW.createSpend.loading }) })
+    step === "create-spend" && /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx11(MarkdownText, { children: SPT_FLOW.createSpend.description }),
+      /* @__PURE__ */ jsx11(Box8, { marginY: 1, children: /* @__PURE__ */ jsx11(Text10, { color: "cyan", children: SPT_FLOW.createSpend.loading }) })
     ] }),
-    (step === "await-approval" || step === "approval-timeout") && spendRequest && /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsxs7(Text9, { color: "green", children: [
+    (step === "await-approval" || step === "approval-timeout") && spendRequest && /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsxs8(Text10, { color: "green", children: [
         "\u2713 Spend request created (",
         spendRequest.id,
         ")"
       ] }),
-      step === "await-approval" && /* @__PURE__ */ jsxs7(Fragment2, { children: [
-        /* @__PURE__ */ jsx9(Text9, { children: SPT_FLOW.approval.description }),
-        /* @__PURE__ */ jsxs7(
-          Box7,
+      step === "await-approval" && /* @__PURE__ */ jsxs8(Fragment2, { children: [
+        /* @__PURE__ */ jsx11(Text10, { children: SPT_FLOW.approval.description }),
+        /* @__PURE__ */ jsxs8(
+          Box8,
           {
             flexDirection: "column",
             borderStyle: "round",
@@ -13933,21 +14493,21 @@ var SptFlow = ({
             paddingY: 1,
             marginTop: 1,
             children: [
-              /* @__PURE__ */ jsxs7(Text9, { children: [
+              /* @__PURE__ */ jsxs8(Text10, { children: [
                 "Approve at:",
                 " ",
-                /* @__PURE__ */ jsx9(Text9, { bold: true, color: "cyan", children: approvalUrl })
+                /* @__PURE__ */ jsx11(Text10, { bold: true, color: "cyan", children: approvalUrl })
               ] }),
-              /* @__PURE__ */ jsx9(Text9, { dimColor: true, children: SPT_FLOW.approval.browserHint })
+              /* @__PURE__ */ jsx11(Text10, { dimColor: true, children: SPT_FLOW.approval.browserHint })
             ]
           }
         ),
-        /* @__PURE__ */ jsx9(Box7, { marginY: 1, children: /* @__PURE__ */ jsx9(Text9, { color: "cyan", children: SPT_FLOW.approval.loading }) })
+        /* @__PURE__ */ jsx11(Box8, { marginY: 1, children: /* @__PURE__ */ jsx11(Text10, { color: "cyan", children: SPT_FLOW.approval.loading }) })
       ] }),
-      step === "approval-timeout" && /* @__PURE__ */ jsxs7(Fragment2, { children: [
-        /* @__PURE__ */ jsx9(Text9, { color: "yellow", children: "\u26A0 Approval timed out (5 min). Still pending \u2014 you can still approve." }),
-        /* @__PURE__ */ jsxs7(
-          Box7,
+      step === "approval-timeout" && /* @__PURE__ */ jsxs8(Fragment2, { children: [
+        /* @__PURE__ */ jsx11(Text10, { color: "yellow", children: "\u26A0 Approval timed out (5 min). Still pending \u2014 you can still approve." }),
+        /* @__PURE__ */ jsxs8(
+          Box8,
           {
             flexDirection: "column",
             borderStyle: "round",
@@ -13956,35 +14516,35 @@ var SptFlow = ({
             paddingY: 1,
             marginTop: 1,
             children: [
-              /* @__PURE__ */ jsxs7(Text9, { children: [
+              /* @__PURE__ */ jsxs8(Text10, { children: [
                 "Approve at:",
                 " ",
-                /* @__PURE__ */ jsx9(Text9, { bold: true, color: "cyan", children: approvalUrl })
+                /* @__PURE__ */ jsx11(Text10, { bold: true, color: "cyan", children: approvalUrl })
               ] }),
-              /* @__PURE__ */ jsx9(Text9, { dimColor: true, children: "Press [Enter] to open in browser" })
+              /* @__PURE__ */ jsx11(Text10, { dimColor: true, children: "Press [Enter] to open in browser" })
             ]
           }
         ),
-        /* @__PURE__ */ jsx9(Box7, { marginTop: 1, children: /* @__PURE__ */ jsx9(Text9, { dimColor: true, children: "r Retry polling q Quit demo" }) })
+        /* @__PURE__ */ jsx11(Box8, { marginTop: 1, children: /* @__PURE__ */ jsx11(Text10, { dimColor: true, children: "r Retry polling q Quit demo" }) })
       ] })
     ] }),
-    (step === "mpp-pay-gate" || step === "mpp-pay") && /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsx9(Text9, { color: "green", children: "\u2713 Approved!" }),
-      /* @__PURE__ */ jsx9(MarkdownText, { children: SPT_FLOW.mppPay.description }),
+    (step === "mpp-pay-gate" || step === "mpp-pay") && /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx11(Text10, { color: "green", children: "\u2713 Approved!" }),
+      /* @__PURE__ */ jsx11(MarkdownText, { children: SPT_FLOW.mppPay.description }),
       step === "mpp-pay-gate" && prompt(SPT_FLOW.mppPay.prompt),
-      step === "mpp-pay" && /* @__PURE__ */ jsx9(Box7, { marginY: 1, children: /* @__PURE__ */ jsx9(Text9, { color: "cyan", children: SPT_FLOW.mppPay.loading }) })
+      step === "mpp-pay" && /* @__PURE__ */ jsx11(Box8, { marginY: 1, children: /* @__PURE__ */ jsx11(Text10, { color: "cyan", children: SPT_FLOW.mppPay.loading }) })
     ] }),
-    step === "done" && payResult && /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsxs7(Text9, { bold: true, color: "green", children: [
+    step === "done" && payResult && /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsxs8(Text10, { bold: true, color: "green", children: [
         "\u2713 ",
         SPT_FLOW.done.success,
         " (HTTP ",
         payResult.status,
         ")"
       ] }),
-      /* @__PURE__ */ jsx9(MarkdownText, { children: SPT_FLOW.done.detail })
+      /* @__PURE__ */ jsx11(MarkdownText, { children: SPT_FLOW.done.detail })
     ] }),
-    step === "error" && /* @__PURE__ */ jsxs7(Text9, { color: "red", children: [
+    step === "error" && /* @__PURE__ */ jsxs8(Text10, { color: "red", children: [
       "Error: ",
       error
     ] })
@@ -13992,7 +14552,7 @@ var SptFlow = ({
 };
 
 // src/commands/demo/demo-runner.tsx
-import { Fragment as Fragment3, jsx as jsx10, jsxs as jsxs8 } from "react/jsx-runtime";
+import { Fragment as Fragment3, jsx as jsx12, jsxs as jsxs9 } from "react/jsx-runtime";
 var DemoRunner = ({
   authRepo: authRepo2,
   spendRequestRepo: spendRequestRepo2,
@@ -14034,7 +14594,7 @@ var DemoRunner = ({
       setPhase("spt-flow");
     }
   });
-  const onCardComplete = useCallback2(
+  const onCardComplete = useCallback3(
     (result) => {
       setPaymentMethodId(result.paymentMethodId);
       setCardSuccess(result.success);
@@ -14050,7 +14610,7 @@ var DemoRunner = ({
     },
     [runSpt, onComplete, exit]
   );
-  const onSptComplete = useCallback2(
+  const onSptComplete = useCallback3(
     (success) => {
       setSptSuccess(success);
       setPhase("summary");
@@ -14061,12 +14621,12 @@ var DemoRunner = ({
     },
     [onComplete, exit]
   );
-  return /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", gap: 1, children: [
-    /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsx10(Text10, { bold: true, children: DEMO_MENU.title }),
-      /* @__PURE__ */ jsx10(Text10, { children: DEMO_MENU.subtitle })
+  return /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", gap: 1, children: [
+    /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx12(Text11, { bold: true, children: DEMO_MENU.title }),
+      /* @__PURE__ */ jsx12(Text11, { children: DEMO_MENU.subtitle })
     ] }),
-    phase === "auth" && /* @__PURE__ */ jsx10(
+    phase === "auth" && /* @__PURE__ */ jsx12(
       Login,
       {
         authResource: authRepo2,
@@ -14075,25 +14635,25 @@ var DemoRunner = ({
         onComplete: () => setPhase(postAuthPhase)
       }
     ),
-    phase === "menu" && /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsx10(Text10, { children: DEMO_MENU.question }),
-      /* @__PURE__ */ jsx10(Box8, { flexDirection: "column", marginTop: 1, gap: 1, children: DEMO_MENU.options.map((opt, i) => /* @__PURE__ */ jsx10(Box8, { flexDirection: "column", children: i === menuIndex ? /* @__PURE__ */ jsxs8(Fragment3, { children: [
-        /* @__PURE__ */ jsxs8(Text10, { color: "cyan", bold: true, children: [
+    phase === "menu" && /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx12(Text11, { children: DEMO_MENU.question }),
+      /* @__PURE__ */ jsx12(Box9, { flexDirection: "column", marginTop: 1, gap: 1, children: DEMO_MENU.options.map((opt, i) => /* @__PURE__ */ jsx12(Box9, { flexDirection: "column", children: i === menuIndex ? /* @__PURE__ */ jsxs9(Fragment3, { children: [
+        /* @__PURE__ */ jsxs9(Text11, { color: "cyan", bold: true, children: [
           ">",
           " ",
           opt.label
         ] }),
-        /* @__PURE__ */ jsxs8(Text10, { color: "cyan", children: [
+        /* @__PURE__ */ jsxs9(Text11, { color: "cyan", children: [
           "  ",
           opt.description
         ] })
-      ] }) : /* @__PURE__ */ jsxs8(Text10, { dimColor: true, children: [
+      ] }) : /* @__PURE__ */ jsxs9(Text11, { dimColor: true, children: [
         "  ",
         opt.label
       ] }) }, opt.key)) }),
-      /* @__PURE__ */ jsx10(Box8, { marginTop: 1, children: /* @__PURE__ */ jsx10(Text10, { dimColor: true, children: DEMO_MENU.hint }) })
+      /* @__PURE__ */ jsx12(Box9, { marginTop: 1, children: /* @__PURE__ */ jsx12(Text11, { dimColor: true, children: DEMO_MENU.hint }) })
     ] }),
-    runCard && phase !== "menu" && /* @__PURE__ */ jsx10(
+    runCard && phase !== "menu" && /* @__PURE__ */ jsx12(
       CardFlow,
       {
         spendRequestRepo: spendRequestRepo2,
@@ -14102,19 +14662,19 @@ var DemoRunner = ({
         onComplete: onCardComplete
       }
     ),
-    phase === "card-done" && /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsx10(Text10, { dimColor: true, children: "\u2500\u2500\u2500" }),
-      /* @__PURE__ */ jsx10(MarkdownText, { children: DEMO_MENU.transition }),
-      /* @__PURE__ */ jsxs8(Text10, { dimColor: true, children: [
+    phase === "card-done" && /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx12(Text11, { dimColor: true, children: "\u2500\u2500\u2500" }),
+      /* @__PURE__ */ jsx12(MarkdownText, { children: DEMO_MENU.transition }),
+      /* @__PURE__ */ jsxs9(Text11, { dimColor: true, children: [
         "\n",
         ">",
         " ",
         DEMO_MENU.transitionPrompt
       ] })
     ] }),
-    runSpt && (phase === "spt-flow" || phase === "summary") && /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", children: [
-      runCard && /* @__PURE__ */ jsx10(Text10, { dimColor: true, children: "\u2500\u2500\u2500" }),
-      /* @__PURE__ */ jsx10(
+    runSpt && (phase === "spt-flow" || phase === "summary") && /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", children: [
+      runCard && /* @__PURE__ */ jsx12(Text11, { dimColor: true, children: "\u2500\u2500\u2500" }),
+      /* @__PURE__ */ jsx12(
         SptFlow,
         {
           spendRequestRepo: spendRequestRepo2,
@@ -14124,30 +14684,30 @@ var DemoRunner = ({
         }
       )
     ] }),
-    phase === "summary" && /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsx10(Text10, { dimColor: true, children: "\u2500\u2500\u2500" }),
-      /* @__PURE__ */ jsx10(Text10, { bold: true, children: "Done!" }),
-      cardSuccess !== null && /* @__PURE__ */ jsxs8(Text10, { color: cardSuccess ? "green" : "red", children: [
+    phase === "summary" && /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx12(Text11, { dimColor: true, children: "\u2500\u2500\u2500" }),
+      /* @__PURE__ */ jsx12(Text11, { bold: true, children: "Done!" }),
+      cardSuccess !== null && /* @__PURE__ */ jsxs9(Text11, { color: cardSuccess ? "green" : "red", children: [
         cardSuccess ? "\u2713" : "\u2717",
         " Virtual card flow"
       ] }),
-      sptSuccess !== null && /* @__PURE__ */ jsxs8(Text10, { color: sptSuccess ? "green" : "red", children: [
+      sptSuccess !== null && /* @__PURE__ */ jsxs9(Text11, { color: sptSuccess ? "green" : "red", children: [
         sptSuccess ? "\u2713" : "\u2717",
         " Machine payment flow"
       ] }),
-      /* @__PURE__ */ jsx10(AppDownloadQrCodes, {})
+      /* @__PURE__ */ jsx12(AppDownloadQrCodes, {})
     ] })
   ] });
 };
 
 // src/commands/demo/index.tsx
-import { jsx as jsx11 } from "react/jsx-runtime";
-var demoOptions = z2.object({
-  onlyCard: z2.boolean().default(false).describe("Run only the virtual card flow"),
-  onlySpt: z2.boolean().default(false).describe("Run only the machine payment (SPT) flow")
+import { jsx as jsx13 } from "react/jsx-runtime";
+var demoOptions = z3.object({
+  onlyCard: z3.boolean().default(false).describe("Run only the virtual card flow"),
+  onlySpt: z3.boolean().default(false).describe("Run only the machine payment (SPT) flow")
 });
 function createDemoCli(authRepo2, spendRequestRepo2, createPaymentMethodsResource, authStorage2) {
-  return Cli2.create("demo", {
+  return Cli3.create("demo", {
     description: "Run an interactive demo of both Link payment flows (virtual card + machine payment)",
     options: demoOptions,
     outputPolicy: "agent-only",
@@ -14160,7 +14720,7 @@ function createDemoCli(authRepo2, spendRequestRepo2, createPaymentMethodsResourc
       }
       const paymentMethodsResource = createPaymentMethodsResource();
       return renderInteractive(
-        /* @__PURE__ */ jsx11(
+        /* @__PURE__ */ jsx13(
           DemoRunner,
           {
             authRepo: authRepo2,
@@ -14180,91 +14740,77 @@ function createDemoCli(authRepo2, spendRequestRepo2, createPaymentMethodsResourc
 }
 
 // src/commands/mpp/index.tsx
-import { Cli as Cli3, z as z4 } from "incur";
-
-// src/utils/require-auth.ts
-var NOT_AUTHENTICATED_ERROR = {
-  code: "NOT_AUTHENTICATED",
-  message: 'Not authenticated. Run "link-cli auth login" first.',
-  cta: {
-    commands: [{ command: "auth login", description: "Log in to Link" }]
-  }
-};
-function requireAuth(authStorage2, envAccessToken2) {
-  const store = authStorage2 ?? storage;
-  return (c, next) => {
-    if (!envAccessToken2 && !store.isAuthenticated()) {
-      return c.error(NOT_AUTHENTICATED_ERROR);
-    }
-    return next();
-  };
-}
-function requireAuthGuard(c, authStorage2, envAccessToken2) {
-  const store = authStorage2 ?? storage;
-  if (!envAccessToken2 && !store.isAuthenticated()) {
-    c.error(NOT_AUTHENTICATED_ERROR);
-  }
-}
+import { Cli as Cli4, z as z5 } from "incur";
 
 // src/commands/mpp/decode-view.tsx
-import { Box as Box9, Text as Text11 } from "ink";
-import { jsx as jsx12, jsxs as jsxs9 } from "react/jsx-runtime";
+import { Box as Box10, Text as Text12 } from "ink";
+import { jsx as jsx14, jsxs as jsxs10 } from "react/jsx-runtime";
 function DecodeChallengeView({
   decoded
 }) {
-  return /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsx12(Text11, { color: "green", children: "\u2713 Stripe challenge decoded" }),
-    /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", marginTop: 1, paddingX: 2, children: [
-      /* @__PURE__ */ jsxs9(Text11, { children: [
+  return /* @__PURE__ */ jsxs10(Box10, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx14(Text12, { color: "green", children: "\u2713 Stripe challenge decoded" }),
+    /* @__PURE__ */ jsxs10(Box10, { flexDirection: "column", marginTop: 1, paddingX: 2, children: [
+      /* @__PURE__ */ jsxs10(Text12, { children: [
         "ID: ",
-        /* @__PURE__ */ jsx12(Text11, { bold: true, children: decoded.id })
+        /* @__PURE__ */ jsx14(Text12, { bold: true, children: decoded.id })
       ] }),
-      /* @__PURE__ */ jsxs9(Text11, { children: [
+      /* @__PURE__ */ jsxs10(Text12, { children: [
         "Realm: ",
-        /* @__PURE__ */ jsx12(Text11, { bold: true, children: decoded.realm })
+        /* @__PURE__ */ jsx14(Text12, { bold: true, children: decoded.realm })
       ] }),
-      /* @__PURE__ */ jsxs9(Text11, { children: [
+      /* @__PURE__ */ jsxs10(Text12, { children: [
         "Network ID: ",
-        /* @__PURE__ */ jsx12(Text11, { bold: true, children: decoded.network_id })
+        /* @__PURE__ */ jsx14(Text12, { bold: true, children: decoded.network_id })
       ] }),
-      /* @__PURE__ */ jsx12(Text11, { children: "Request JSON:" }),
-      /* @__PURE__ */ jsx12(Text11, { children: JSON.stringify(decoded.request_json, null, 2) })
+      /* @__PURE__ */ jsx14(Text12, { children: "Request JSON:" }),
+      /* @__PURE__ */ jsx14(Text12, { children: JSON.stringify(decoded.request_json, null, 2) })
     ] })
   ] });
 }
 
 // src/commands/mpp/schema.ts
-import { z as z3 } from "incur";
-var payOptions = z3.object({
-  spendRequestId: z3.string().describe(
-    'Approved spend request ID with credential_type "shared_payment_token"'
+import { z as z4 } from "incur";
+var payOptions = z4.object({
+  spendRequestId: z4.string().optional().describe(
+    'Approved spend request ID with credential_type "shared_payment_token". If omitted, the command handles the full flow: probe URL, parse challenge, create spend request, get approval, and pay.'
+  ),
+  method: z4.string().optional().describe("HTTP method (default: GET, or POST if --data is provided)"),
+  data: z4.string().optional().describe("Request body (implies POST if --method is not set)"),
+  header: z4.array(z4.string()).default([]).describe('Request header in "Name: Value" format (repeatable)'),
+  context: z4.string().min(100).optional().describe(
+    "Min 100 chars \u2014 describe the purchase and rationale; the user reads this when approving. Required when --spend-request-id is not provided."
+  ),
+  amount: z4.coerce.number().int().positive().optional().describe(
+    "Amount in cents (derived from 402 challenge if omitted; required if challenge has no amount)"
   ),
-  method: z3.string().optional().describe("HTTP method (default: GET, or POST if --data is provided)"),
-  data: z3.string().optional().describe("Request body (implies POST if --method is not set)"),
-  header: z3.array(z3.string()).default([]).describe('Request header in "Name: Value" format (repeatable)')
+  paymentMethodId: z4.string().optional().describe("Payment method ID (uses default if omitted)"),
+  test: z4.boolean().default(false).describe(
+    "Use test mode (creates testmode credentials from test card data)"
+  )
 });
-var decodeOptions = z3.object({
-  challenge: z3.string().describe(
+var decodeOptions = z4.object({
+  challenge: z4.string().describe(
     "Raw WWW-Authenticate header value; may include multiple payment challenges"
   )
 });
 
 // src/commands/mpp/index.tsx
-import { jsx as jsx13 } from "react/jsx-runtime";
-function createMppCli(repository, authStorage2, envAccessToken2) {
-  const cli2 = Cli3.create("mpp", {
+import { jsx as jsx15 } from "react/jsx-runtime";
+function createMppCli(repository, paymentMethodsFactory, authStorage2, envAccessToken2) {
+  const cli2 = Cli4.create("mpp", {
     description: "Machine payment protocol (MPP) commands"
   });
   cli2.command("pay", {
-    description: "Complete a machine payment protocol (MPP) payment using an approved spend request",
-    args: z4.object({
-      url: z4.string().describe("URL to pay")
+    description: "Pay a URL via the Machine Payment Protocol. Handles the full 402 flow: probes the URL, parses the challenge, creates a spend request, gets approval, and pays with the SPT. Pass --spend-request-id to skip creation and use a pre-approved spend request.",
+    args: z5.object({
+      url: z5.string().describe("URL to pay")
     }),
     options: payOptions,
     alias: { method: "X", data: "d", header: "H" },
     outputPolicy: "agent-only",
     middleware: [requireAuth(authStorage2, envAccessToken2)],
-    async run(c) {
+    async *run(c) {
       const url = c.args.url;
       const opts = c.options;
       const method = opts.method;
@@ -14273,7 +14819,7 @@ function createMppCli(repository, authStorage2, envAccessToken2) {
       if (!c.agent && !c.formatExplicit) {
         let capturedResult = null;
         return renderInteractive(
-          /* @__PURE__ */ jsx13(
+          /* @__PURE__ */ jsx15(
             MppPay,
             {
               url,
@@ -14281,7 +14827,12 @@ function createMppCli(repository, authStorage2, envAccessToken2) {
               method,
               data,
               headers,
+              context: opts.context,
+              amountOverride: opts.amount,
+              paymentMethodId: opts.paymentMethodId,
+              test: opts.test,
               repository,
+              paymentMethodsFactory,
               onComplete: (result) => {
                 capturedResult = result;
               }
@@ -14294,14 +14845,90 @@ function createMppCli(repository, authStorage2, envAccessToken2) {
           }
         );
       }
-      return runMppPay(
-        url,
-        opts.spendRequestId,
-        method,
-        data,
-        headers,
-        repository
-      );
+      if (opts.spendRequestId) {
+        yield await runMppPayWithSpendRequest(
+          url,
+          opts.spendRequestId,
+          method,
+          data,
+          headers,
+          repository
+        );
+        return;
+      }
+      const httpMethod = method ?? (data !== void 0 ? "POST" : "GET");
+      const requestHeaders = buildHeaders(data, headers);
+      const probeResponse = await fetch(url, {
+        method: httpMethod,
+        body: data,
+        headers: requestHeaders
+      });
+      if (probeResponse.status !== 402) {
+        yield await readPayResult(probeResponse);
+        return;
+      }
+      const wwwAuth = probeResponse.headers.get("www-authenticate");
+      if (!wwwAuth) {
+        return c.error({
+          code: "INVALID_RESPONSE",
+          message: "URL returned 402 but no WWW-Authenticate header"
+        });
+      }
+      const decoded = decodeStripeChallenge(wwwAuth);
+      const networkId = decoded.network_id;
+      const challengeAmount = decoded.request_json.amount ? Number(decoded.request_json.amount) : void 0;
+      const challengeCurrency = decoded.request_json.currency ?? "usd";
+      const amount = opts.amount ?? challengeAmount;
+      if (!amount) {
+        return c.error({
+          code: "INVALID_INPUT",
+          message: "Could not determine amount from 402 challenge. Pass --amount explicitly."
+        });
+      }
+      if (!opts.context) {
+        return c.error({
+          code: "INVALID_INPUT",
+          message: "--context is required for the full MPP flow (min 100 chars). Describe the purchase and rationale."
+        });
+      }
+      let pmId = opts.paymentMethodId;
+      if (!pmId) {
+        const pmResource = paymentMethodsFactory();
+        const methods = await pmResource.list();
+        if (!methods.length) {
+          return c.error({
+            code: "NO_PAYMENT_METHOD",
+            message: "No payment methods found. Add one with `link-cli payment-methods add`."
+          });
+        }
+        pmId = methods[0].id;
+      }
+      const spendRequest = await repository.createSpendRequest({
+        payment_details: pmId,
+        credential_type: "shared_payment_token",
+        network_id: networkId,
+        amount,
+        currency: challengeCurrency,
+        context: opts.context,
+        request_approval: true,
+        test: opts.test || void 0
+      });
+      const nextFlags = [`--spend-request-id ${spendRequest.id}`];
+      if (method) nextFlags.push(`-X ${method}`);
+      if (data) nextFlags.push(`-d '${data}'`);
+      if (headers) {
+        for (const h of headers) nextFlags.push(`-H '${h}'`);
+      }
+      const nextCommand = `mpp pay ${url} ${nextFlags.join(" ")}`;
+      yield {
+        ...spendRequest,
+        instruction: `Present the approval_url to the user and ask them to approve in the Link app. Then call \`spend-request retrieve ${spendRequest.id} --interval 2 --max-attempts 300\` to poll until approved. Once approved, run the _next.command to complete payment. Do not wait for the user to reply \u2014 start polling immediately.`,
+        _next: {
+          poll_command: `spend-request retrieve ${spendRequest.id} --interval 2 --max-attempts 300`,
+          pay_command: nextCommand,
+          until: "status changes from pending_approval, then run pay_command"
+        }
+      };
     }
   });
   cli2.command("decode", {
@@ -14312,7 +14939,7 @@ function createMppCli(repository, authStorage2, envAccessToken2) {
       const decoded = decodeStripeChallenge(c.options.challenge);
       if (!c.agent && !c.formatExplicit) {
         return renderInteractive(
-          /* @__PURE__ */ jsx13(DecodeChallengeView, { decoded }),
+          /* @__PURE__ */ jsx15(DecodeChallengeView, { decoded }),
           () => decoded
         );
       }
@@ -14323,12 +14950,12 @@ function createMppCli(repository, authStorage2, envAccessToken2) {
 }
 
 // src/commands/onboard/index.tsx
-import { Cli as Cli4 } from "incur";
+import { Cli as Cli5 } from "incur";
 
 // src/commands/onboard/onboard-runner.tsx
-import { Box as Box10, Text as Text12, useApp as useApp2, useInput as useInput5 } from "ink";
+import { Box as Box11, Text as Text13, useApp as useApp2, useInput as useInput5 } from "ink";
 import { useEffect as useEffect7, useRef as useRef4, useState as useState8 } from "react";
-import { jsx as jsx14, jsxs as jsxs10 } from "react/jsx-runtime";
+import { jsx as jsx16, jsxs as jsxs11 } from "react/jsx-runtime";
 var OnboardRunner = ({
   authRepo: authRepo2,
   spendRequestRepo: spendRequestRepo2,
@@ -14394,21 +15021,21 @@ var OnboardRunner = ({
     const order = ["welcome", "auth", "payment-methods", "demo"];
     return order.indexOf(phase) > order.indexOf(target);
   };
-  const prompt = (label = "Press [Enter] to continue") => /* @__PURE__ */ jsxs10(Text12, { dimColor: true, children: [
+  const prompt = (label = "Press [Enter] to continue") => /* @__PURE__ */ jsxs11(Text13, { dimColor: true, children: [
     "\n",
     ">",
     " ",
     label
   ] });
-  return /* @__PURE__ */ jsxs10(Box10, { flexDirection: "column", gap: 1, children: [
-    /* @__PURE__ */ jsxs10(Box10, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsx14(Text12, { bold: true, children: ONBOARD.title }),
-      /* @__PURE__ */ jsx14(Text12, { children: ONBOARD.subtitle })
+  return /* @__PURE__ */ jsxs11(Box11, { flexDirection: "column", gap: 1, children: [
+    /* @__PURE__ */ jsxs11(Box11, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx16(Text13, { bold: true, children: ONBOARD.title }),
+      /* @__PURE__ */ jsx16(Text13, { children: ONBOARD.subtitle })
     ] }),
-    /* @__PURE__ */ jsx14(Box10, { flexDirection: "column", children: authSkipped || pastPhase("auth") ? /* @__PURE__ */ jsxs10(Text12, { color: "green", children: [
+    /* @__PURE__ */ jsx16(Box11, { flexDirection: "column", children: authSkipped || pastPhase("auth") ? /* @__PURE__ */ jsxs11(Text13, { color: "green", children: [
       "\u2713 ",
       authSkipped ? ONBOARD.auth.alreadyLoggedIn : ONBOARD.auth.authenticated
-    ] }) : phase === "auth" && !storage2.isAuthenticated() ? /* @__PURE__ */ jsx14(
+    ] }) : phase === "auth" && !storage2.isAuthenticated() ? /* @__PURE__ */ jsx16(
       Login,
       {
         authResource: authRepo2,
@@ -14417,24 +15044,24 @@ var OnboardRunner = ({
         onComplete: () => authResolver.current?.()
       }
     ) : null }),
-    pastPhase("auth") && /* @__PURE__ */ jsxs10(Box10, { flexDirection: "column", children: [
-      phase === "payment-methods" && !pmMissing && /* @__PURE__ */ jsx14(Text12, { color: "cyan", children: ONBOARD.paymentMethods.loading }),
-      pmMissing && /* @__PURE__ */ jsxs10(Box10, { flexDirection: "column", children: [
-        /* @__PURE__ */ jsx14(Text12, { color: "yellow", children: ONBOARD.paymentMethods.missing }),
-        /* @__PURE__ */ jsx14(Box10, { marginTop: 1, children: /* @__PURE__ */ jsxs10(Text12, { children: [
+    pastPhase("auth") && /* @__PURE__ */ jsxs11(Box11, { flexDirection: "column", children: [
+      phase === "payment-methods" && !pmMissing && /* @__PURE__ */ jsx16(Text13, { color: "cyan", children: ONBOARD.paymentMethods.loading }),
+      pmMissing && /* @__PURE__ */ jsxs11(Box11, { flexDirection: "column", children: [
+        /* @__PURE__ */ jsx16(Text13, { color: "yellow", children: ONBOARD.paymentMethods.missing }),
+        /* @__PURE__ */ jsx16(Box11, { marginTop: 1, children: /* @__PURE__ */ jsxs11(Text13, { children: [
           "Visit",
           " ",
-          /* @__PURE__ */ jsx14(Text12, { bold: true, color: "cyan", children: "app.link.com/wallet" }),
+          /* @__PURE__ */ jsx16(Text13, { bold: true, color: "cyan", children: "app.link.com/wallet" }),
           " ",
           "to add a payment method, then press [Enter] to continue."
         ] }) }),
         prompt(ONBOARD.paymentMethods.retryPrompt)
       ] }),
-      pastPhase("payment-methods") && /* @__PURE__ */ jsx14(Text12, { color: "green", children: "\u2713 Payment method found" })
+      pastPhase("payment-methods") && /* @__PURE__ */ jsx16(Text13, { color: "green", children: "\u2713 Payment method found" })
     ] }),
-    phase === "demo" && /* @__PURE__ */ jsxs10(Box10, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsx14(Text12, { dimColor: true, children: "\u2500\u2500\u2500" }),
-      /* @__PURE__ */ jsx14(
+    phase === "demo" && /* @__PURE__ */ jsxs11(Box11, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx16(Text13, { dimColor: true, children: "\u2500\u2500\u2500" }),
+      /* @__PURE__ */ jsx16(
         DemoRunner,
         {
           authRepo: authRepo2,
@@ -14445,7 +15072,7 @@ var OnboardRunner = ({
         }
       )
     ] }),
-    error && /* @__PURE__ */ jsxs10(Text12, { color: "red", children: [
+    error && /* @__PURE__ */ jsxs11(Text13, { color: "red", children: [
       "Error: ",
       error
     ] })
@@ -14453,9 +15080,9 @@ var OnboardRunner = ({
 };
 
 // src/commands/onboard/index.tsx
-import { jsx as jsx15 } from "react/jsx-runtime";
+import { jsx as jsx17 } from "react/jsx-runtime";
 function createOnboardCli(authRepo2, spendRequestRepo2, createPaymentMethodsResource, authStorage2) {
-  return Cli4.create("onboard", {
+  return Cli5.create("onboard", {
     description: "Guided setup: authenticate, verify payment methods, and demo both payment flows",
     outputPolicy: "agent-only",
     async run(c) {
@@ -14467,7 +15094,7 @@ function createOnboardCli(authRepo2, spendRequestRepo2, createPaymentMethodsReso
       }
       const paymentMethodsResource = createPaymentMethodsResource();
       return renderInteractive(
-        /* @__PURE__ */ jsx15(
+        /* @__PURE__ */ jsx17(
           OnboardRunner,
           {
             authRepo: authRepo2,
@@ -14485,11 +15112,11 @@ function createOnboardCli(authRepo2, spendRequestRepo2, createPaymentMethodsReso
 }
 
 // src/commands/payment-methods/index.tsx
-import { Cli as Cli5 } from "incur";
+import { Cli as Cli6 } from "incur";
 
 // src/commands/payment-methods/add.tsx
-import { Box as Box11, Text as Text13, useApp as useApp3, useInput as useInput6 } from "ink";
-import { jsx as jsx16, jsxs as jsxs11 } from "react/jsx-runtime";
+import { Box as Box12, Text as Text14, useApp as useApp3, useInput as useInput6 } from "ink";
+import { jsx as jsx18, jsxs as jsxs12 } from "react/jsx-runtime";
 var WALLET_URL = "https://app.link.com/wallet";
 var AddPaymentMethod = () => {
   const { exit } = useApp3();
@@ -14499,10 +15126,10 @@ var AddPaymentMethod = () => {
       exit();
     }
   });
-  return /* @__PURE__ */ jsxs11(Box11, { flexDirection: "column", paddingY: 1, children: [
-    /* @__PURE__ */ jsx16(Box11, { marginBottom: 1, children: /* @__PURE__ */ jsx16(Text13, { bold: true, children: "Add Payment Method" }) }),
-    /* @__PURE__ */ jsxs11(
-      Box11,
+  return /* @__PURE__ */ jsxs12(Box12, { flexDirection: "column", paddingY: 1, children: [
+    /* @__PURE__ */ jsx18(Box12, { marginBottom: 1, children: /* @__PURE__ */ jsx18(Text14, { bold: true, children: "Add Payment Method" }) }),
+    /* @__PURE__ */ jsxs12(
+      Box12,
       {
         flexDirection: "column",
         borderStyle: "round",
@@ -14510,12 +15137,12 @@ var AddPaymentMethod = () => {
         paddingX: 2,
         paddingY: 1,
         children: [
-          /* @__PURE__ */ jsxs11(Text13, { children: [
+          /* @__PURE__ */ jsxs12(Text14, { children: [
             "Open:",
             " ",
-            /* @__PURE__ */ jsx16(Text13, { bold: true, color: "cyan", children: WALLET_URL })
+            /* @__PURE__ */ jsx18(Text14, { bold: true, color: "cyan", children: WALLET_URL })
           ] }),
-          /* @__PURE__ */ jsx16(Text13, { dimColor: true, children: "Press Enter to open in browser" })
+          /* @__PURE__ */ jsx18(Text14, { dimColor: true, children: "Press Enter to open in browser" })
         ]
       }
     )
@@ -14523,48 +15150,48 @@ var AddPaymentMethod = () => {
 };
 
 // src/commands/payment-methods/list.tsx
-import { Box as Box12, Text as Text14 } from "ink";
-import Spinner4 from "ink-spinner";
-import { useCallback as useCallback3 } from "react";
-import { jsx as jsx17, jsxs as jsxs12 } from "react/jsx-runtime";
+import { Box as Box13, Text as Text15 } from "ink";
+import Spinner5 from "ink-spinner";
+import { useCallback as useCallback4 } from "react";
+import { jsx as jsx19, jsxs as jsxs13 } from "react/jsx-runtime";
 var PaymentMethodsList = ({
   resource,
   onComplete
 }) => {
-  const action = useCallback3(() => resource.listPaymentMethods(), [resource]);
+  const action = useCallback4(() => resource.listPaymentMethods(), [resource]);
   const { status, data: methods, error } = useAsyncAction(action, onComplete);
   if (status === "loading") {
-    return /* @__PURE__ */ jsx17(Box12, { children: /* @__PURE__ */ jsxs12(Text14, { color: "cyan", children: [
-      /* @__PURE__ */ jsx17(Spinner4, { type: "dots" }),
+    return /* @__PURE__ */ jsx19(Box13, { children: /* @__PURE__ */ jsxs13(Text15, { color: "cyan", children: [
+      /* @__PURE__ */ jsx19(Spinner5, { type: "dots" }),
       " Loading payment methods..."
     ] }) });
   }
   if (status === "error") {
-    return /* @__PURE__ */ jsxs12(Box12, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsx17(Text14, { color: "red", children: "\u2717 Failed to load payment methods" }),
-      /* @__PURE__ */ jsx17(Text14, { color: "red", children: error })
+    return /* @__PURE__ */ jsxs13(Box13, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx19(Text15, { color: "red", children: "\u2717 Failed to load payment methods" }),
+      /* @__PURE__ */ jsx19(Text15, { color: "red", children: error })
     ] });
   }
   if (!methods || methods.length === 0) {
-    return /* @__PURE__ */ jsx17(Box12, { children: /* @__PURE__ */ jsx17(Text14, { dimColor: true, children: "No payment methods found" }) });
+    return /* @__PURE__ */ jsx19(Box13, { children: /* @__PURE__ */ jsx19(Text15, { dimColor: true, children: "No payment methods found" }) });
   }
-  return /* @__PURE__ */ jsxs12(Box12, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsx17(Text14, { bold: true, children: "Payment Methods" }),
-    /* @__PURE__ */ jsx17(Box12, { flexDirection: "column", marginTop: 1, children: methods.map((pm) => {
+  return /* @__PURE__ */ jsxs13(Box13, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx19(Text15, { bold: true, children: "Payment Methods" }),
+    /* @__PURE__ */ jsx19(Box13, { flexDirection: "column", marginTop: 1, children: methods.map((pm) => {
       const label = pm.card_details?.brand ?? pm.bank_account_details?.bank_name ?? "Bank account";
       const last4 = pm.card_details?.last4 ?? pm.bank_account_details?.last4;
       const suffix = pm.nickname ? `(${pm.nickname})` : "";
       const agenticCap = pm.capabilities?.agentic_payments;
       const ineligible = agenticCap && !agenticCap.eligible;
-      return /* @__PURE__ */ jsx17(Box12, { paddingX: 2, children: /* @__PURE__ */ jsxs12(Text14, { children: [
-        /* @__PURE__ */ jsx17(Text14, { dimColor: true, children: pm.id }),
+      return /* @__PURE__ */ jsx19(Box13, { paddingX: 2, children: /* @__PURE__ */ jsxs13(Text15, { children: [
+        /* @__PURE__ */ jsx19(Text15, { dimColor: true, children: pm.id }),
         "  ",
         label,
         " ****",
         last4,
         suffix ? ` ${suffix}` : "",
-        pm.is_default ? /* @__PURE__ */ jsx17(Text14, { color: "green", children: " (default)" }) : "",
-        ineligible ? /* @__PURE__ */ jsxs12(Text14, { dimColor: true, children: [
+        pm.is_default ? /* @__PURE__ */ jsx19(Text15, { color: "green", children: " (default)" }) : "",
+        ineligible ? /* @__PURE__ */ jsxs13(Text15, { dimColor: true, children: [
           "  ",
           "agentic_payments: ineligible",
           agenticCap.ineligibility_reasons?.length > 0 ? ` (${agenticCap.ineligibility_reasons.join(", ")})` : ""
@@ -14575,9 +15202,9 @@ var PaymentMethodsList = ({
 };
 
 // src/commands/payment-methods/index.tsx
-import { jsx as jsx18 } from "react/jsx-runtime";
+import { jsx as jsx20 } from "react/jsx-runtime";
 function createPaymentMethodsCli(createResource, authStorage2, envAccessToken2) {
-  const cli2 = Cli5.create("payment-methods", {
+  const cli2 = Cli6.create("payment-methods", {
     description: "Payment methods management commands"
   });
   cli2.command("list", {
@@ -14588,7 +15215,7 @@ function createPaymentMethodsCli(createResource, authStorage2, envAccessToken2)
       const resource = createResource();
       if (!c.agent && !c.formatExplicit) {
         return renderInteractive(
-          /* @__PURE__ */ jsx18(PaymentMethodsList, { resource, onComplete: () => {
+          /* @__PURE__ */ jsx20(PaymentMethodsList, { resource, onComplete: () => {
           } }),
           () => resource.listPaymentMethods()
         );
@@ -14602,7 +15229,7 @@ function createPaymentMethodsCli(createResource, authStorage2, envAccessToken2)
     middleware: [requireAuth(authStorage2, envAccessToken2)],
     async run(c) {
       if (!c.agent && !c.formatExplicit) {
-        return renderInteractive(/* @__PURE__ */ jsx18(AddPaymentMethod, {}), () => ({
+        return renderInteractive(/* @__PURE__ */ jsx20(AddPaymentMethod, {}), () => ({
           url: WALLET_URL
         }));
       }
@@ -14613,22 +15240,22 @@ function createPaymentMethodsCli(createResource, authStorage2, envAccessToken2)
 }
 
 // src/commands/report/index.tsx
-import { Cli as Cli6 } from "incur";
+import { Cli as Cli7 } from "incur";
 
 // src/commands/report/schema.ts
-import { z as z5 } from "incur";
-var reportOptions = z5.object({
-  domain: z5.string().describe("Domain where the outcome occurred"),
-  outcome: z5.enum(REPORT_OUTCOMES).describe("What happened: success, blocked, or abandoned"),
-  spendRequestId: z5.string().describe("Spend request ID (lsrq_...)"),
-  tag: z5.array(z5.enum(REPORT_TAGS)).optional().describe("Outcome tags (repeatable)"),
-  step: z5.string().max(500).optional().describe("Where in the flow the agent was"),
-  freeformContext: z5.string().max(500).optional().describe("Additional context (max 500 chars)")
+import { z as z6 } from "incur";
+var reportOptions = z6.object({
+  domain: z6.string().describe("Domain where the outcome occurred"),
+  outcome: z6.enum(REPORT_OUTCOMES).describe("What happened: success, blocked, or abandoned"),
+  spendRequestId: z6.string().describe("Spend request ID (lsrq_...)"),
+  tag: z6.array(z6.enum(REPORT_TAGS)).optional().describe("Outcome tags (repeatable)"),
+  step: z6.string().max(500).optional().describe("Where in the flow the agent was"),
+  freeformContext: z6.string().max(500).optional().describe("Additional context (max 500 chars)")
 });
 
 // src/commands/report/index.tsx
 function createReportCli(createResource, authStorage2, envAccessToken2) {
-  const cli2 = Cli6.create("report", {
+  const cli2 = Cli7.create("report", {
     description: "Report the outcome of an agent action on a domain. Call after every purchase attempt.",
     options: reportOptions,
     outputPolicy: "agent-only",
@@ -14653,7 +15280,7 @@ function createReportCli(createResource, authStorage2, envAccessToken2) {
 import {
   createServer
 } from "http";
-import { Cli as Cli7, z as z6 } from "incur";
+import { Cli as Cli8, z as z7 } from "incur";
 async function nodeRequestToWebRequest(req, port) {
   const body = await new Promise((resolve) => {
     const chunks = [];
@@ -14678,17 +15305,47 @@ async function sendWebResponse(webRes, res) {
   res.writeHead(webRes.status);
   res.end(Buffer.from(buffer));
 }
+var LOOPBACK_HOSTS = /* @__PURE__ */ new Set(["127.0.0.1", "::1", "localhost"]);
+function isLoopbackHost(host) {
+  return LOOPBACK_HOSTS.has(host.toLowerCase());
+}
+function isAllowedOrigin(origin) {
+  if (!origin) return true;
+  try {
+    return isLoopbackHost(new URL(origin).hostname);
+  } catch {
+    return false;
+  }
+}
+function isAllowedRoute(method, pathname) {
+  if (pathname === "/mcp") return true;
+  if (pathname.startsWith("/.well-known/skills/") && method === "GET")
+    return true;
+  return false;
+}
 function createServeCli(rootCli) {
-  return Cli7.create("serve", {
+  return Cli8.create("serve", {
     description: "Start an HTTP server exposing link-cli as an MCP endpoint at /mcp",
-    options: z6.object({
-      port: z6.coerce.number().default(54321).describe("Port to listen on")
+    options: z7.object({
+      port: z7.coerce.number().default(54321).describe("Port to listen on"),
+      host: z7.string().default("127.0.0.1").describe(
+        "Host/interface to bind. Defaults to loopback; set explicitly (e.g. 0.0.0.0) to expose beyond localhost."
+      )
     }),
     async run(c) {
-      const { port } = c.options;
+      const { port, host } = c.options;
       const server = createServer(
         async (req, res) => {
-          res.setHeader("Access-Control-Allow-Origin", "*");
+          const origin = req.headers.origin;
+          if (!isAllowedOrigin(origin)) {
+            res.writeHead(403, { "Content-Type": "application/json" });
+            res.end(JSON.stringify({ error: "forbidden origin" }));
+            return;
+          }
+          if (origin) {
+            res.setHeader("Access-Control-Allow-Origin", origin);
+            res.setHeader("Vary", "Origin");
+          }
           res.setHeader(
             "Access-Control-Allow-Methods",
             "GET, POST, DELETE, OPTIONS"
@@ -14702,6 +15359,12 @@ function createServeCli(rootCli) {
             res.end();
             return;
           }
+          const pathname = new URL(req.url ?? "/", `http://localhost:${port}`).pathname;
+          if (!isAllowedRoute(req.method ?? "GET", pathname)) {
+            res.writeHead(404, { "Content-Type": "application/json" });
+            res.end(JSON.stringify({ error: "not found" }));
+            return;
+          }
           try {
             const webReq = await nodeRequestToWebRequest(req, port);
             const webRes = await rootCli.fetch(webReq);
@@ -14715,9 +15378,16 @@ function createServeCli(rootCli) {
       );
       await new Promise((resolve, reject) => {
         server.on("error", reject);
-        server.listen(port, () => {
+        server.listen(port, host, () => {
+          if (!isLoopbackHost(host)) {
+            process.stderr.write(
+              `WARNING: link-cli serve is bound to ${host}, which may be reachable beyond localhost.
+Any caller that can reach this port can use the authenticated Link session of this CLI. Only do this on a trusted, isolated network.
+`
+            );
+          }
           process.stderr.write(
-            `link-cli MCP server listening on http://localhost:${port}/mcp
+            `link-cli MCP server listening on http://${host}:${port}/mcp
 `
           );
         });
@@ -14727,13 +15397,13 @@ function createServeCli(rootCli) {
 }
 
 // src/commands/shipping-address/index.tsx
-import { Cli as Cli8 } from "incur";
+import { Cli as Cli9 } from "incur";
 
 // src/commands/shipping-address/list.tsx
-import { Box as Box13, Text as Text15 } from "ink";
-import Spinner5 from "ink-spinner";
-import { useCallback as useCallback4 } from "react";
-import { jsx as jsx19, jsxs as jsxs13 } from "react/jsx-runtime";
+import { Box as Box14, Text as Text16 } from "ink";
+import Spinner6 from "ink-spinner";
+import { useCallback as useCallback5 } from "react";
+import { jsx as jsx21, jsxs as jsxs14 } from "react/jsx-runtime";
 function formatStreetLine(address) {
   const parts = [address.line_1, address.line_2].filter(Boolean);
   return parts.length > 0 ? parts.join(", ") : null;
@@ -14751,100 +15421,311 @@ function formatLocalityLine(address) {
   }
   return localityPostal || address.country_code || null;
 }
-function formatAddressLines(addressRecord) {
-  if (!addressRecord.address) {
-    return ["Address details unavailable"];
+function formatAddressLines(addressRecord) {
+  if (!addressRecord.address) {
+    return ["Address details unavailable"];
+  }
+  const address = addressRecord.address;
+  const lines = [formatStreetLine(address), formatLocalityLine(address)].filter(
+    (line) => Boolean(line)
+  );
+  return lines.length > 0 ? lines : ["Address details unavailable"];
+}
+var ShippingAddressList = ({
+  resource,
+  onComplete
+}) => {
+  const action = useCallback5(
+    () => resource.listShippingAddresses(),
+    [resource]
+  );
+  const {
+    status,
+    data: shippingAddresses,
+    error
+  } = useAsyncAction(action, onComplete);
+  if (status === "loading") {
+    return /* @__PURE__ */ jsx21(Box14, { children: /* @__PURE__ */ jsxs14(Text16, { color: "cyan", children: [
+      /* @__PURE__ */ jsx21(Spinner6, { type: "dots" }),
+      " Loading shipping addresses..."
+    ] }) });
+  }
+  if (status === "error") {
+    return /* @__PURE__ */ jsxs14(Box14, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx21(Text16, { color: "red", children: "\u2717 Failed to load shipping addresses" }),
+      /* @__PURE__ */ jsx21(Text16, { color: "red", children: error })
+    ] });
+  }
+  if (!shippingAddresses || shippingAddresses.length === 0) {
+    return /* @__PURE__ */ jsx21(Box14, { children: /* @__PURE__ */ jsx21(Text16, { dimColor: true, children: "No shipping addresses found" }) });
+  }
+  return /* @__PURE__ */ jsxs14(Box14, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx21(Text16, { bold: true, children: "Shipping Addresses" }),
+    /* @__PURE__ */ jsx21(Box14, { flexDirection: "column", marginTop: 1, children: shippingAddresses.map((shippingAddress) => {
+      const addressName = shippingAddress.address?.name;
+      const nickname = shippingAddress.nickname ? ` (${shippingAddress.nickname})` : "";
+      return /* @__PURE__ */ jsxs14(
+        Box14,
+        {
+          flexDirection: "column",
+          paddingX: 2,
+          marginBottom: 1,
+          children: [
+            /* @__PURE__ */ jsxs14(Text16, { children: [
+              /* @__PURE__ */ jsx21(Text16, { dimColor: true, children: shippingAddress.id }),
+              nickname,
+              shippingAddress.is_default ? /* @__PURE__ */ jsx21(Text16, { color: "green", children: " (default)" }) : null
+            ] }),
+            /* @__PURE__ */ jsxs14(Box14, { flexDirection: "column", marginTop: 1, children: [
+              addressName ? /* @__PURE__ */ jsx21(Text16, { bold: true, children: addressName }) : null,
+              formatAddressLines(shippingAddress).map((line) => /* @__PURE__ */ jsx21(Text16, { children: line }, `${shippingAddress.id}:${line}`))
+            ] })
+          ]
+        },
+        shippingAddress.id
+      );
+    }) })
+  ] });
+};
+
+// src/commands/shipping-address/index.tsx
+import { jsx as jsx22 } from "react/jsx-runtime";
+function createShippingAddressCli(createResource, authStorage2, envAccessToken2) {
+  const cli2 = Cli9.create("shipping-address", {
+    description: "Shipping address management commands"
+  });
+  cli2.command("list", {
+    description: "List all shipping addresses on your account",
+    outputPolicy: "agent-only",
+    middleware: [requireAuth(authStorage2, envAccessToken2)],
+    async run(c) {
+      const resource = createResource();
+      if (!c.agent && !c.formatExplicit) {
+        return renderInteractive(
+          /* @__PURE__ */ jsx22(ShippingAddressList, { resource, onComplete: () => {
+          } }),
+          () => resource.listShippingAddresses()
+        );
+      }
+      return resource.listShippingAddresses();
+    }
+  });
+  return cli2;
+}
+
+// src/commands/sources/index.tsx
+import { Cli as Cli10 } from "incur";
+
+// src/commands/sources/list.tsx
+import { Box as Box15, Text as Text17 } from "ink";
+import Spinner7 from "ink-spinner";
+import { useCallback as useCallback6 } from "react";
+import { jsx as jsx23, jsxs as jsxs15 } from "react/jsx-runtime";
+var COLUMN_GAP2 = "  ";
+var HORIZONTAL_PADDING = 4;
+function truncateCell2(value, width) {
+  if (value.length <= width) {
+    return value;
+  }
+  if (width <= 3) {
+    return value.slice(0, width);
+  }
+  return `${value.slice(0, width - 3)}...`;
+}
+function formatCell2(value, width) {
+  return truncateCell2(value, width).padEnd(width);
+}
+function sourceId(source, index) {
+  return typeof source.id === "string" && source.id.length > 0 ? source.id : `source-${index + 1}`;
+}
+function statusFromValue(value) {
+  if (value && typeof value === "object" && !Array.isArray(value)) {
+    const status = value.status;
+    return typeof status === "string" ? status : null;
+  }
+  return null;
+}
+function formatCapabilities(source) {
+  const capabilities = source.capabilities;
+  if (!capabilities || typeof capabilities !== "object") {
+    return "-";
+  }
+  const entries = Object.entries(capabilities).map(([capability, value]) => {
+    const status = statusFromValue(value);
+    return status ? `${capability}:${status}` : capability;
+  }).sort();
+  return entries.length > 0 ? entries.join(", ") : "-";
+}
+function formatExternalConnection(source) {
+  const status = statusFromValue(source.external_connection);
+  return status ?? "-";
+}
+function sourceRow(source, index) {
+  const capabilities = formatCapabilities(source);
+  const external = formatExternalConnection(source);
+  return {
+    key: sourceId(source, index),
+    name: source.name ?? "Source",
+    type: source.type ?? "-",
+    id: sourceId(source, index),
+    capabilities,
+    external
+  };
+}
+function tableColumns() {
+  return [
+    { label: "Name", value: (row) => row.name, minWidth: 14, maxWidth: 24 },
+    { label: "Type", value: (row) => row.type, minWidth: 10, maxWidth: 14 },
+    { label: "ID", value: (row) => row.id, minWidth: 16, maxWidth: 48 },
+    {
+      label: "Capabilities",
+      value: (row) => row.capabilities,
+      minWidth: 8,
+      maxWidth: 48
+    },
+    {
+      label: "External connection status",
+      value: (row) => row.external,
+      minWidth: 8,
+      maxWidth: 36
+    }
+  ];
+}
+function distributeWidths(columns, availableWidth) {
+  const gapWidth = COLUMN_GAP2.length * Math.max(0, columns.length - 1);
+  const contentWidth2 = Math.max(columns.length, availableWidth - gapWidth);
+  const widths = columns.map((column) => column.minWidth);
+  let remaining = contentWidth2 - widths.reduce((total, width) => total + width, 0);
+  while (remaining > 0) {
+    let changed = false;
+    for (let index = 0; index < columns.length && remaining > 0; index += 1) {
+      if (widths[index] >= columns[index].maxWidth) {
+        continue;
+      }
+      widths[index] += 1;
+      remaining -= 1;
+      changed = true;
+    }
+    if (!changed) {
+      break;
+    }
   }
-  const address = addressRecord.address;
-  const lines = [formatStreetLine(address), formatLocalityLine(address)].filter(
-    (line) => Boolean(line)
+  return widths;
+}
+function renderTableRows(rows, terminalWidth) {
+  const columns = tableColumns();
+  const availableWidth = contentWidth(terminalWidth);
+  const widths = distributeWidths(columns, availableWidth);
+  const headerRow = columns.map((column, index) => formatCell2(column.label, widths[index])).join(COLUMN_GAP2).slice(0, availableWidth);
+  const separatorRow = "-".repeat(headerRow.length).slice(0, availableWidth);
+  const bodyRows = rows.map(
+    (row) => columns.map((column, index) => formatCell2(column.value(row), widths[index])).join(COLUMN_GAP2).slice(0, availableWidth)
   );
-  return lines.length > 0 ? lines : ["Address details unavailable"];
+  return { headerRow, separatorRow, bodyRows };
 }
-var ShippingAddressList = ({
+function contentWidth(terminalWidth) {
+  return Math.max(1, terminalWidth - HORIZONTAL_PADDING);
+}
+var SourcesList = ({
   resource,
+  params,
   onComplete
 }) => {
-  const action = useCallback4(
-    () => resource.listShippingAddresses(),
-    [resource]
+  const action = useCallback6(
+    () => resource.listSources(params),
+    [resource, params]
+  );
+  const { status, data: page, error } = useAsyncAction(action, onComplete);
+  const sources = page?.data ?? [];
+  const nextCursor = page?.has_more && sources.length > 0 ? sources[sources.length - 1].id : null;
+  const rows = sources.map(sourceRow);
+  const terminalWidth = process.stdout.columns ?? 140;
+  const { headerRow, separatorRow, bodyRows } = renderTableRows(
+    rows,
+    terminalWidth
   );
-  const {
-    status,
-    data: shippingAddresses,
-    error
-  } = useAsyncAction(action, onComplete);
   if (status === "loading") {
-    return /* @__PURE__ */ jsx19(Box13, { children: /* @__PURE__ */ jsxs13(Text15, { color: "cyan", children: [
-      /* @__PURE__ */ jsx19(Spinner5, { type: "dots" }),
-      " Loading shipping addresses..."
+    return /* @__PURE__ */ jsx23(Box15, { children: /* @__PURE__ */ jsxs15(Text17, { color: "cyan", children: [
+      /* @__PURE__ */ jsx23(Spinner7, { type: "dots" }),
+      " Loading sources..."
     ] }) });
   }
   if (status === "error") {
-    return /* @__PURE__ */ jsxs13(Box13, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsx19(Text15, { color: "red", children: "\u2717 Failed to load shipping addresses" }),
-      /* @__PURE__ */ jsx19(Text15, { color: "red", children: error })
+    return /* @__PURE__ */ jsxs15(Box15, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx23(Text17, { color: "red", children: "Failed to load sources" }),
+      /* @__PURE__ */ jsx23(Text17, { color: "red", children: error })
     ] });
   }
-  if (!shippingAddresses || shippingAddresses.length === 0) {
-    return /* @__PURE__ */ jsx19(Box13, { children: /* @__PURE__ */ jsx19(Text15, { dimColor: true, children: "No shipping addresses found" }) });
+  if (sources.length === 0) {
+    return /* @__PURE__ */ jsx23(Box15, { children: /* @__PURE__ */ jsx23(Text17, { dimColor: true, children: "No sources found" }) });
   }
-  return /* @__PURE__ */ jsxs13(Box13, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsx19(Text15, { bold: true, children: "Shipping Addresses" }),
-    /* @__PURE__ */ jsx19(Box13, { flexDirection: "column", marginTop: 1, children: shippingAddresses.map((shippingAddress) => {
-      const addressName = shippingAddress.address?.name;
-      const nickname = shippingAddress.nickname ? ` (${shippingAddress.nickname})` : "";
-      return /* @__PURE__ */ jsxs13(
-        Box13,
-        {
-          flexDirection: "column",
-          paddingX: 2,
-          marginBottom: 1,
-          children: [
-            /* @__PURE__ */ jsxs13(Text15, { children: [
-              /* @__PURE__ */ jsx19(Text15, { dimColor: true, children: shippingAddress.id }),
-              nickname,
-              shippingAddress.is_default ? /* @__PURE__ */ jsx19(Text15, { color: "green", children: " (default)" }) : null
-            ] }),
-            /* @__PURE__ */ jsxs13(Box13, { flexDirection: "column", marginTop: 1, children: [
-              addressName ? /* @__PURE__ */ jsx19(Text15, { bold: true, children: addressName }) : null,
-              formatAddressLines(shippingAddress).map((line) => /* @__PURE__ */ jsx19(Text15, { children: line }, `${shippingAddress.id}:${line}`))
-            ] })
-          ]
-        },
-        shippingAddress.id
-      );
-    }) })
+  return /* @__PURE__ */ jsxs15(Box15, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx23(Text17, { bold: true, children: "Sources" }),
+    /* @__PURE__ */ jsxs15(Box15, { flexDirection: "column", marginTop: 1, paddingX: 2, children: [
+      /* @__PURE__ */ jsx23(Text17, { bold: true, children: headerRow }),
+      /* @__PURE__ */ jsx23(Text17, { dimColor: true, children: separatorRow }),
+      bodyRows.map((row, index) => /* @__PURE__ */ jsx23(Text17, { children: row }, rows[index].key))
+    ] }),
+    page?.has_more !== void 0 ? /* @__PURE__ */ jsxs15(Box15, { flexDirection: "column", marginTop: 1, children: [
+      /* @__PURE__ */ jsxs15(Text17, { dimColor: true, children: [
+        "has_more: ",
+        String(page.has_more)
+      ] }),
+      typeof nextCursor === "string" && nextCursor.length > 0 ? /* @__PURE__ */ jsx23(Text17, { dimColor: true, children: `next page: --starting-after ${nextCursor}` }) : null
+    ] }) : null
   ] });
 };
 
-// src/commands/shipping-address/index.tsx
-import { jsx as jsx20 } from "react/jsx-runtime";
-function createShippingAddressCli(createResource, authStorage2, envAccessToken2) {
-  const cli2 = Cli8.create("shipping-address", {
-    description: "Shipping address management commands"
+// src/commands/sources/schema.ts
+import { z as z8 } from "incur";
+var listOptions2 = z8.object({
+  limit: z8.coerce.number().int().positive().max(100).optional().describe("Maximum number of sources to return (1-100)."),
+  startingAfter: z8.string().optional().describe("Cursor: return sources after this source ID."),
+  endingBefore: z8.string().optional().describe("Cursor: return sources before this source ID.")
+});
+
+// src/commands/sources/index.tsx
+import { jsx as jsx24 } from "react/jsx-runtime";
+function createSourcesCli(createResource, authStorage2, envAccessToken2) {
+  const cli2 = Cli10.create("sources", {
+    description: "List sources from your Link wallet"
   });
   cli2.command("list", {
-    description: "List all shipping addresses on your account",
+    description: "List sources from your Link wallet",
+    options: listOptions2,
     outputPolicy: "agent-only",
     middleware: [requireAuth(authStorage2, envAccessToken2)],
     async run(c) {
+      const opts = c.options;
       const resource = createResource();
+      const params = {};
+      if (opts.limit !== void 0) params.limit = opts.limit;
+      if (opts.startingAfter !== void 0)
+        params.starting_after = opts.startingAfter;
+      if (opts.endingBefore !== void 0)
+        params.ending_before = opts.endingBefore;
       if (!c.agent && !c.formatExplicit) {
         return renderInteractive(
-          /* @__PURE__ */ jsx20(ShippingAddressList, { resource, onComplete: () => {
-          } }),
-          () => resource.listShippingAddresses()
+          /* @__PURE__ */ jsx24(
+            SourcesList,
+            {
+              resource,
+              params,
+              onComplete: () => {
+              }
+            }
+          ),
+          () => resource.listSources(params)
         );
       }
-      return resource.listShippingAddresses();
+      return resource.listSources(params);
     }
   });
   return cli2;
 }
 
 // src/commands/spend-request/index.tsx
-import { Cli as Cli9, z as z9 } from "incur";
+import { Cli as Cli11, z as z11 } from "incur";
 
 // src/utils/credential-output.ts
 import { constants } from "fs";
@@ -14902,21 +15783,21 @@ async function writeCredentialFile(filePath, data, force) {
 }
 
 // src/utils/line-item-parser.ts
-import { z as z7 } from "zod";
-var LineItemSchema = z7.object({
-  name: z7.string(),
-  url: z7.string().optional(),
-  image_url: z7.string().optional(),
-  description: z7.string().optional(),
-  sku: z7.string().optional(),
-  quantity: z7.coerce.number().optional(),
-  unit_amount: z7.coerce.number().optional(),
-  product_url: z7.string().optional()
+import { z as z9 } from "zod";
+var LineItemSchema = z9.object({
+  name: z9.string(),
+  url: z9.string().optional(),
+  image_url: z9.string().optional(),
+  description: z9.string().optional(),
+  sku: z9.string().optional(),
+  quantity: z9.coerce.number().optional(),
+  unit_amount: z9.coerce.number().optional(),
+  product_url: z9.string().optional()
 }).strict();
-var TotalSchema = z7.object({
-  type: z7.string(),
-  display_text: z7.string(),
-  amount: z7.coerce.number()
+var TotalSchema = z9.object({
+  type: z9.string(),
+  display_text: z9.string(),
+  amount: z9.coerce.number()
 }).strict();
 function parseKvString(raw) {
   const result = {};
@@ -14946,7 +15827,7 @@ function parseLineItemFlag(raw) {
   try {
     return LineItemSchema.parse(obj);
   } catch (err) {
-    if (err instanceof z7.ZodError)
+    if (err instanceof z9.ZodError)
       throw formatZodError(err, "Line item", LineItemSchema);
     throw err;
   }
@@ -14956,65 +15837,65 @@ function parseTotalFlag(raw) {
   try {
     return TotalSchema.parse(obj);
   } catch (err) {
-    if (err instanceof z7.ZodError)
+    if (err instanceof z9.ZodError)
       throw formatZodError(err, "Total", TotalSchema);
     throw err;
   }
 }
 
 // src/commands/spend-request/cancel.tsx
-import { Box as Box14, Text as Text16 } from "ink";
-import Spinner6 from "ink-spinner";
-import { useCallback as useCallback5 } from "react";
-import { jsx as jsx21, jsxs as jsxs14 } from "react/jsx-runtime";
+import { Box as Box16, Text as Text18 } from "ink";
+import Spinner8 from "ink-spinner";
+import { useCallback as useCallback7 } from "react";
+import { jsx as jsx25, jsxs as jsxs16 } from "react/jsx-runtime";
 var CancelSpendRequest = ({
   repository,
   id,
   onComplete
 }) => {
-  const action = useCallback5(
+  const action = useCallback7(
     () => repository.cancelSpendRequest(id),
     [repository, id]
   );
   const { status, data: request, error } = useAsyncAction(action, onComplete);
   if (status === "loading") {
-    return /* @__PURE__ */ jsx21(Box14, { children: /* @__PURE__ */ jsxs14(Text16, { color: "cyan", children: [
-      /* @__PURE__ */ jsx21(Spinner6, { type: "dots" }),
+    return /* @__PURE__ */ jsx25(Box16, { children: /* @__PURE__ */ jsxs16(Text18, { color: "cyan", children: [
+      /* @__PURE__ */ jsx25(Spinner8, { type: "dots" }),
       " Canceling spend request ",
       id,
       "..."
     ] }) });
   }
   if (status === "error") {
-    return /* @__PURE__ */ jsxs14(Box14, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsx21(Text16, { color: "red", children: "\u2717 Failed to cancel spend request" }),
-      /* @__PURE__ */ jsx21(Text16, { color: "red", children: error })
+    return /* @__PURE__ */ jsxs16(Box16, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx25(Text18, { color: "red", children: "\u2717 Failed to cancel spend request" }),
+      /* @__PURE__ */ jsx25(Text18, { color: "red", children: error })
     ] });
   }
-  return /* @__PURE__ */ jsxs14(Box14, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsx21(Text16, { color: "green", children: "\u2713 Spend request canceled" }),
-    /* @__PURE__ */ jsx21(Box14, { flexDirection: "column", marginTop: 1, paddingX: 2, children: /* @__PURE__ */ jsxs14(Text16, { children: [
+  return /* @__PURE__ */ jsxs16(Box16, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx25(Text18, { color: "green", children: "\u2713 Spend request canceled" }),
+    /* @__PURE__ */ jsx25(Box16, { flexDirection: "column", marginTop: 1, paddingX: 2, children: /* @__PURE__ */ jsxs16(Text18, { children: [
       "ID: ",
-      /* @__PURE__ */ jsx21(Text16, { bold: true, children: request?.id })
+      /* @__PURE__ */ jsx25(Text18, { bold: true, children: request?.id })
     ] }) })
   ] });
 };
 
 // src/commands/spend-request/create.tsx
-import { Box as Box16, Text as Text18, useApp as useApp4 } from "ink";
-import Spinner8 from "ink-spinner";
-import { useCallback as useCallback6, useEffect as useEffect9, useState as useState9 } from "react";
+import { Box as Box18, Text as Text20, useApp as useApp4 } from "ink";
+import Spinner10 from "ink-spinner";
+import { useCallback as useCallback8, useEffect as useEffect9, useState as useState9 } from "react";
 
 // src/commands/spend-request/approval-waiting-view.tsx
-import { Box as Box15, Text as Text17 } from "ink";
-import Spinner7 from "ink-spinner";
-import { jsx as jsx22, jsxs as jsxs15 } from "react/jsx-runtime";
+import { Box as Box17, Text as Text19 } from "ink";
+import Spinner9 from "ink-spinner";
+import { jsx as jsx26, jsxs as jsxs17 } from "react/jsx-runtime";
 var ApprovalWaitingView = ({
   status,
   approvalUrl
-}) => /* @__PURE__ */ jsxs15(Box15, { flexDirection: "column", paddingY: 1, children: [
-  /* @__PURE__ */ jsxs15(
-    Box15,
+}) => /* @__PURE__ */ jsxs17(Box17, { flexDirection: "column", paddingY: 1, children: [
+  /* @__PURE__ */ jsxs17(
+    Box17,
     {
       flexDirection: "column",
       borderStyle: "round",
@@ -15022,20 +15903,20 @@ var ApprovalWaitingView = ({
       paddingX: 2,
       paddingY: 1,
       children: [
-        /* @__PURE__ */ jsxs15(Text17, { children: [
+        /* @__PURE__ */ jsxs17(Text19, { children: [
           "Approve at:",
           " ",
-          /* @__PURE__ */ jsx22(Text17, { bold: true, color: "cyan", children: approvalUrl })
+          /* @__PURE__ */ jsx26(Text19, { bold: true, color: "cyan", children: approvalUrl })
         ] }),
-        /* @__PURE__ */ jsx22(Text17, { dimColor: true, children: "Press Enter to open in browser" })
+        /* @__PURE__ */ jsx26(Text19, { dimColor: true, children: "Press Enter to open in browser" })
       ]
     }
   ),
-  /* @__PURE__ */ jsx22(AppDownloadQrCodes, {}),
-  /* @__PURE__ */ jsx22(Box15, { marginTop: 1, children: status === "polling" ? /* @__PURE__ */ jsxs15(Text17, { color: "cyan", children: [
-    /* @__PURE__ */ jsx22(Spinner7, { type: "dots" }),
+  /* @__PURE__ */ jsx26(AppDownloadQrCodes, {}),
+  /* @__PURE__ */ jsx26(Box17, { marginTop: 1, children: status === "polling" ? /* @__PURE__ */ jsxs17(Text19, { color: "cyan", children: [
+    /* @__PURE__ */ jsx26(Spinner9, { type: "dots" }),
     " Waiting for approval..."
-  ] }) : /* @__PURE__ */ jsx22(Text17, { dimColor: true, children: "Waiting..." }) })
+  ] }) : /* @__PURE__ */ jsx26(Text19, { dimColor: true, children: "Waiting..." }) })
 ] });
 
 // src/commands/spend-request/use-approval-polling.ts
@@ -15104,7 +15985,7 @@ function useApprovalPolling({
 }
 
 // src/commands/spend-request/create.tsx
-import { Fragment as Fragment4, jsx as jsx23, jsxs as jsxs16 } from "react/jsx-runtime";
+import { Fragment as Fragment4, jsx as jsx27, jsxs as jsxs18 } from "react/jsx-runtime";
 var CreateSpendRequest = ({
   repository,
   params,
@@ -15121,18 +16002,18 @@ var CreateSpendRequest = ({
   const [fileError, setFileError] = useState9("");
   const approvalUrl = request?.approval_url ?? "";
   const { exit } = useApp4();
-  const completeAndExit = useCallback6(
+  const completeAndExit = useCallback8(
     (result) => {
       onComplete(result);
       exit();
     },
     [onComplete, exit]
   );
-  const onSuccess = useCallback6(
+  const onSuccess = useCallback8(
     (result) => setRequest(result),
     []
   );
-  const onError = useCallback6((msg) => setError(msg), []);
+  const onError = useCallback8((msg) => setError(msg), []);
   useApprovalPolling({
     status,
     setStatus,
@@ -15179,105 +16060,105 @@ var CreateSpendRequest = ({
     writeCredentialFile(outputFile, fileData, force ?? false).then((path7) => setOutputFilePath(path7)).catch((err) => setFileError(err.message));
   }, [status, outputFile, force, request]);
   if (status === "creating") {
-    return /* @__PURE__ */ jsx23(Box16, { children: /* @__PURE__ */ jsxs16(Text18, { color: "cyan", children: [
-      /* @__PURE__ */ jsx23(Spinner8, { type: "dots" }),
+    return /* @__PURE__ */ jsx27(Box18, { children: /* @__PURE__ */ jsxs18(Text20, { color: "cyan", children: [
+      /* @__PURE__ */ jsx27(Spinner10, { type: "dots" }),
       " Creating spend request..."
     ] }) });
   }
   if (status === "error") {
-    return /* @__PURE__ */ jsxs16(Box16, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsx23(Text18, { color: "red", children: "\u2717 Failed to create spend request" }),
-      /* @__PURE__ */ jsx23(Text18, { color: "red", children: error }),
-      verificationUrl && /* @__PURE__ */ jsxs16(Text18, { color: "red", children: [
+    return /* @__PURE__ */ jsxs18(Box18, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx27(Text20, { color: "red", children: "\u2717 Failed to create spend request" }),
+      /* @__PURE__ */ jsx27(Text20, { color: "red", children: error }),
+      verificationUrl && /* @__PURE__ */ jsxs18(Text20, { color: "red", children: [
         "Complete additional verification at: ",
         verificationUrl
       ] })
     ] });
   }
   if (status === "success") {
-    return /* @__PURE__ */ jsxs16(Box16, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsx23(Text18, { color: "green", children: "\u2713 Spend request created" }),
-      /* @__PURE__ */ jsxs16(Box16, { flexDirection: "column", marginTop: 1, paddingX: 2, children: [
-        /* @__PURE__ */ jsxs16(Text18, { children: [
+    return /* @__PURE__ */ jsxs18(Box18, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx27(Text20, { color: "green", children: "\u2713 Spend request created" }),
+      /* @__PURE__ */ jsxs18(Box18, { flexDirection: "column", marginTop: 1, paddingX: 2, children: [
+        /* @__PURE__ */ jsxs18(Text20, { children: [
           "ID: ",
-          /* @__PURE__ */ jsx23(Text18, { bold: true, children: request?.id })
+          /* @__PURE__ */ jsx27(Text20, { bold: true, children: request?.id })
         ] }),
-        /* @__PURE__ */ jsxs16(Text18, { children: [
+        /* @__PURE__ */ jsxs18(Text20, { children: [
           "Status: ",
-          /* @__PURE__ */ jsx23(Text18, { bold: true, children: request?.status })
+          /* @__PURE__ */ jsx27(Text20, { bold: true, children: request?.status })
         ] }),
-        /* @__PURE__ */ jsxs16(Text18, { children: [
+        /* @__PURE__ */ jsxs18(Text20, { children: [
           "Amount:",
           " ",
-          /* @__PURE__ */ jsx23(Text18, { bold: true, children: request?.amount != null ? `${request.amount} ${request.currency?.toUpperCase() ?? ""}`.trim() : "N/A" })
+          /* @__PURE__ */ jsx27(Text20, { bold: true, children: request?.amount != null ? `${request.amount} ${request.currency?.toUpperCase() ?? ""}`.trim() : "N/A" })
         ] }),
-        /* @__PURE__ */ jsxs16(Text18, { children: [
+        /* @__PURE__ */ jsxs18(Text20, { children: [
           "Merchant: ",
-          /* @__PURE__ */ jsx23(Text18, { bold: true, children: request?.merchant_name })
+          /* @__PURE__ */ jsx27(Text20, { bold: true, children: request?.merchant_name })
         ] }),
-        /* @__PURE__ */ jsxs16(Text18, { children: [
+        /* @__PURE__ */ jsxs18(Text20, { children: [
           "Line Items:",
           " ",
-          /* @__PURE__ */ jsx23(Text18, { bold: true, children: request?.line_items.map((li) => li.name).join(", ") || "N/A" })
+          /* @__PURE__ */ jsx27(Text20, { bold: true, children: request?.line_items.map((li) => li.name).join(", ") || "N/A" })
         ] }),
-        request?.credential_type === "shared_payment_token" && request.shared_payment_token && /* @__PURE__ */ jsxs16(Text18, { children: [
+        request?.credential_type === "shared_payment_token" && request.shared_payment_token && /* @__PURE__ */ jsxs18(Text20, { children: [
           "Token: ",
-          /* @__PURE__ */ jsx23(Text18, { bold: true, children: request.shared_payment_token.id })
+          /* @__PURE__ */ jsx27(Text20, { bold: true, children: request.shared_payment_token.id })
         ] })
       ] }),
-      request?.card && !outputFile && /* @__PURE__ */ jsxs16(Box16, { flexDirection: "column", marginTop: 1, children: [
-        /* @__PURE__ */ jsx23(Text18, { bold: true, children: "Card Details:" }),
-        /* @__PURE__ */ jsxs16(Text18, { children: [
+      request?.card && !outputFile && /* @__PURE__ */ jsxs18(Box18, { flexDirection: "column", marginTop: 1, children: [
+        /* @__PURE__ */ jsx27(Text20, { bold: true, children: "Card Details:" }),
+        /* @__PURE__ */ jsxs18(Text20, { children: [
           " ",
           "Number: ",
-          /* @__PURE__ */ jsx23(Text18, { bold: true, children: request.card.number })
+          /* @__PURE__ */ jsx27(Text20, { bold: true, children: request.card.number })
         ] }),
-        /* @__PURE__ */ jsxs16(Text18, { children: [
+        /* @__PURE__ */ jsxs18(Text20, { children: [
           " ",
           "Brand: ",
-          /* @__PURE__ */ jsx23(Text18, { bold: true, children: request.card.brand })
+          /* @__PURE__ */ jsx27(Text20, { bold: true, children: request.card.brand })
         ] }),
-        /* @__PURE__ */ jsxs16(Text18, { children: [
+        /* @__PURE__ */ jsxs18(Text20, { children: [
           " ",
           "Expiry:",
           " ",
-          /* @__PURE__ */ jsxs16(Text18, { bold: true, children: [
+          /* @__PURE__ */ jsxs18(Text20, { bold: true, children: [
             String(request.card.exp_month).padStart(2, "0"),
             "/",
             request.card.exp_year
           ] })
         ] }),
-        request.card.cvc && /* @__PURE__ */ jsxs16(Text18, { children: [
+        request.card.cvc && /* @__PURE__ */ jsxs18(Text20, { children: [
           " ",
           "CVC: ",
-          /* @__PURE__ */ jsx23(Text18, { bold: true, children: request.card.cvc })
+          /* @__PURE__ */ jsx27(Text20, { bold: true, children: request.card.cvc })
         ] }),
-        request.card.valid_until && /* @__PURE__ */ jsxs16(Text18, { children: [
+        request.card.valid_until && /* @__PURE__ */ jsxs18(Text20, { children: [
           " ",
           "Valid Until: ",
-          /* @__PURE__ */ jsx23(Text18, { bold: true, children: request.card.valid_until })
+          /* @__PURE__ */ jsx27(Text20, { bold: true, children: request.card.valid_until })
         ] })
       ] }),
-      request?.card && outputFile && /* @__PURE__ */ jsxs16(Box16, { flexDirection: "column", marginTop: 1, children: [
-        outputFilePath && /* @__PURE__ */ jsxs16(Text18, { color: "green", children: [
+      request?.card && outputFile && /* @__PURE__ */ jsxs18(Box18, { flexDirection: "column", marginTop: 1, children: [
+        outputFilePath && /* @__PURE__ */ jsxs18(Text20, { color: "green", children: [
           "Card credentials written to ",
-          /* @__PURE__ */ jsx23(Text18, { bold: true, children: outputFilePath })
+          /* @__PURE__ */ jsx27(Text20, { bold: true, children: outputFilePath })
         ] }),
-        fileError && /* @__PURE__ */ jsxs16(Text18, { color: "red", children: [
+        fileError && /* @__PURE__ */ jsxs18(Text20, { color: "red", children: [
           "Failed to write card file: ",
           fileError
         ] })
       ] }),
-      /* @__PURE__ */ jsx23(AppDownloadQrCodes, {})
+      /* @__PURE__ */ jsx27(AppDownloadQrCodes, {})
     ] });
   }
-  return /* @__PURE__ */ jsxs16(Fragment4, { children: [
-    /* @__PURE__ */ jsx23(Box16, { children: /* @__PURE__ */ jsxs16(Text18, { color: "green", children: [
+  return /* @__PURE__ */ jsxs18(Fragment4, { children: [
+    /* @__PURE__ */ jsx27(Box18, { children: /* @__PURE__ */ jsxs18(Text20, { color: "green", children: [
       "\u2713 Spend request created (ID: ",
-      /* @__PURE__ */ jsx23(Text18, { bold: true, children: request?.id }),
+      /* @__PURE__ */ jsx27(Text20, { bold: true, children: request?.id }),
       ")"
     ] }) }),
-    /* @__PURE__ */ jsx23(
+    /* @__PURE__ */ jsx27(
       ApprovalWaitingView,
       {
         status,
@@ -15288,21 +16169,21 @@ var CreateSpendRequest = ({
 };
 
 // src/commands/spend-request/list.tsx
-import { Box as Box17, Text as Text19, useApp as useApp5 } from "ink";
-import Spinner9 from "ink-spinner";
-import { useCallback as useCallback7 } from "react";
-import { jsx as jsx24, jsxs as jsxs17 } from "react/jsx-runtime";
+import { Box as Box19, Text as Text21, useApp as useApp5 } from "ink";
+import Spinner11 from "ink-spinner";
+import { useCallback as useCallback9 } from "react";
+import { jsx as jsx28, jsxs as jsxs19 } from "react/jsx-runtime";
 var SpendRequestList = ({
   repository,
   includeHistory = false,
   onComplete
 }) => {
   const { exit } = useApp5();
-  const action = useCallback7(
+  const action = useCallback9(
     () => repository.listSpendRequests({ includeHistory }),
     [repository, includeHistory]
   );
-  const wrappedOnComplete = useCallback7(
+  const wrappedOnComplete = useCallback9(
     (result) => {
       onComplete(result);
       exit();
@@ -15315,29 +16196,29 @@ var SpendRequestList = ({
     error
   } = useAsyncAction(action, wrappedOnComplete);
   if (status === "loading") {
-    return /* @__PURE__ */ jsx24(Box17, { children: /* @__PURE__ */ jsxs17(Text19, { color: "cyan", children: [
-      /* @__PURE__ */ jsx24(Spinner9, { type: "dots" }),
+    return /* @__PURE__ */ jsx28(Box19, { children: /* @__PURE__ */ jsxs19(Text21, { color: "cyan", children: [
+      /* @__PURE__ */ jsx28(Spinner11, { type: "dots" }),
       " Loading spend requests..."
     ] }) });
   }
   if (status === "error") {
-    return /* @__PURE__ */ jsxs17(Box17, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsx24(Text19, { color: "red", children: "\u2717 Failed to load spend requests" }),
-      /* @__PURE__ */ jsx24(Text19, { color: "red", children: error })
+    return /* @__PURE__ */ jsxs19(Box19, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx28(Text21, { color: "red", children: "\u2717 Failed to load spend requests" }),
+      /* @__PURE__ */ jsx28(Text21, { color: "red", children: error })
     ] });
   }
   if (!requests || requests.length === 0) {
-    return /* @__PURE__ */ jsx24(Box17, { children: /* @__PURE__ */ jsx24(Text19, { dimColor: true, children: includeHistory ? "No spend requests found" : "No active spend requests found" }) });
+    return /* @__PURE__ */ jsx28(Box19, { children: /* @__PURE__ */ jsx28(Text21, { dimColor: true, children: includeHistory ? "No spend requests found" : "No active spend requests found" }) });
   }
-  return /* @__PURE__ */ jsxs17(Box17, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsx24(Text19, { bold: true, children: includeHistory ? "All Spend Requests" : "Active Spend Requests" }),
-    /* @__PURE__ */ jsx24(Box17, { flexDirection: "column", marginTop: 1, children: requests.map((sr) => {
+  return /* @__PURE__ */ jsxs19(Box19, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx28(Text21, { bold: true, children: includeHistory ? "All Spend Requests" : "Active Spend Requests" }),
+    /* @__PURE__ */ jsx28(Box19, { flexDirection: "column", marginTop: 1, children: requests.map((sr) => {
       const statusColor = sr.status === "approved" ? "green" : sr.status === "pending_approval" ? "yellow" : "white";
       const amount = sr.amount != null ? `$${(sr.amount / 100).toFixed(2)} ${(sr.currency ?? "usd").toUpperCase()}` : "";
-      return /* @__PURE__ */ jsx24(Box17, { paddingX: 2, children: /* @__PURE__ */ jsxs17(Text19, { children: [
-        /* @__PURE__ */ jsx24(Text19, { dimColor: true, children: sr.id }),
+      return /* @__PURE__ */ jsx28(Box19, { paddingX: 2, children: /* @__PURE__ */ jsxs19(Text21, { children: [
+        /* @__PURE__ */ jsx28(Text21, { dimColor: true, children: sr.id }),
         "  ",
-        /* @__PURE__ */ jsx24(Text19, { color: statusColor, children: sr.status }),
+        /* @__PURE__ */ jsx28(Text21, { color: statusColor, children: sr.status }),
         sr.merchant_name ? `  ${sr.merchant_name}` : "",
         amount ? `  ${amount}` : ""
       ] }) }, sr.id);
@@ -15346,10 +16227,10 @@ var SpendRequestList = ({
 };
 
 // src/commands/spend-request/request-approval.tsx
-import { Box as Box18, Text as Text20, useApp as useApp6 } from "ink";
-import Spinner10 from "ink-spinner";
-import { useCallback as useCallback8, useEffect as useEffect10, useState as useState10 } from "react";
-import { jsx as jsx25, jsxs as jsxs18 } from "react/jsx-runtime";
+import { Box as Box20, Text as Text22, useApp as useApp6 } from "ink";
+import Spinner12 from "ink-spinner";
+import { useCallback as useCallback10, useEffect as useEffect10, useState as useState10 } from "react";
+import { jsx as jsx29, jsxs as jsxs20 } from "react/jsx-runtime";
 var RequestApproval = ({
   repository,
   id,
@@ -15361,15 +16242,15 @@ var RequestApproval = ({
   const [error, setError] = useState10("");
   const [verificationUrl, setVerificationUrl] = useState10("");
   const { exit } = useApp6();
-  const completeAndExit = useCallback8(
+  const completeAndExit = useCallback10(
     (result2) => {
       onComplete(result2);
       exit();
     },
     [onComplete, exit]
   );
-  const onSuccess = useCallback8((r) => setResult(r), []);
-  const onError = useCallback8((msg) => setError(msg), []);
+  const onSuccess = useCallback10((r) => setResult(r), []);
+  const onError = useCallback10((msg) => setError(msg), []);
   useApprovalPolling({
     status,
     setStatus,
@@ -15402,50 +16283,50 @@ var RequestApproval = ({
     request();
   }, [repository, id, exit, onComplete]);
   if (status === "requesting") {
-    return /* @__PURE__ */ jsx25(Box18, { children: /* @__PURE__ */ jsxs18(Text20, { color: "cyan", children: [
-      /* @__PURE__ */ jsx25(Spinner10, { type: "dots" }),
+    return /* @__PURE__ */ jsx29(Box20, { children: /* @__PURE__ */ jsxs20(Text22, { color: "cyan", children: [
+      /* @__PURE__ */ jsx29(Spinner12, { type: "dots" }),
       " Requesting approval..."
     ] }) });
   }
   if (status === "error") {
-    return /* @__PURE__ */ jsxs18(Box18, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsx25(Text20, { color: "red", children: "\u2717 Failed to request approval" }),
-      /* @__PURE__ */ jsx25(Text20, { color: "red", children: error }),
-      verificationUrl && /* @__PURE__ */ jsxs18(Text20, { color: "red", children: [
+    return /* @__PURE__ */ jsxs20(Box20, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx29(Text22, { color: "red", children: "\u2717 Failed to request approval" }),
+      /* @__PURE__ */ jsx29(Text22, { color: "red", children: error }),
+      verificationUrl && /* @__PURE__ */ jsxs20(Text22, { color: "red", children: [
         "Complete additional verification at: ",
         verificationUrl
       ] })
     ] });
   }
   if (status === "success") {
-    return /* @__PURE__ */ jsxs18(Box18, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsx25(Text20, { color: "green", children: "\u2713 Approval completed" }),
-      /* @__PURE__ */ jsxs18(Box18, { flexDirection: "column", marginTop: 1, paddingX: 2, children: [
-        /* @__PURE__ */ jsxs18(Text20, { children: [
+    return /* @__PURE__ */ jsxs20(Box20, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx29(Text22, { color: "green", children: "\u2713 Approval completed" }),
+      /* @__PURE__ */ jsxs20(Box20, { flexDirection: "column", marginTop: 1, paddingX: 2, children: [
+        /* @__PURE__ */ jsxs20(Text22, { children: [
           "ID: ",
-          /* @__PURE__ */ jsx25(Text20, { bold: true, children: result?.id })
+          /* @__PURE__ */ jsx29(Text22, { bold: true, children: result?.id })
         ] }),
-        /* @__PURE__ */ jsxs18(Text20, { children: [
+        /* @__PURE__ */ jsxs20(Text22, { children: [
           "Status: ",
-          /* @__PURE__ */ jsx25(Text20, { bold: true, children: result?.status })
+          /* @__PURE__ */ jsx29(Text22, { bold: true, children: result?.status })
         ] }),
-        /* @__PURE__ */ jsxs18(Text20, { children: [
+        /* @__PURE__ */ jsxs20(Text22, { children: [
           "Amount:",
           " ",
-          /* @__PURE__ */ jsx25(Text20, { bold: true, children: result?.amount != null ? `${result.amount} ${result.currency?.toUpperCase() ?? ""}`.trim() : "N/A" })
+          /* @__PURE__ */ jsx29(Text22, { bold: true, children: result?.amount != null ? `${result.amount} ${result.currency?.toUpperCase() ?? ""}`.trim() : "N/A" })
         ] }),
-        /* @__PURE__ */ jsxs18(Text20, { children: [
+        /* @__PURE__ */ jsxs20(Text22, { children: [
           "Merchant: ",
-          /* @__PURE__ */ jsx25(Text20, { bold: true, children: result?.merchant_name })
+          /* @__PURE__ */ jsx29(Text22, { bold: true, children: result?.merchant_name })
         ] }),
-        result?.credential_type === "shared_payment_token" && result.shared_payment_token && /* @__PURE__ */ jsxs18(Text20, { children: [
+        result?.credential_type === "shared_payment_token" && result.shared_payment_token && /* @__PURE__ */ jsxs20(Text22, { children: [
           "Token: ",
-          /* @__PURE__ */ jsx25(Text20, { bold: true, children: result.shared_payment_token.id })
+          /* @__PURE__ */ jsx29(Text22, { bold: true, children: result.shared_payment_token.id })
         ] })
       ] })
     ] });
   }
-  return /* @__PURE__ */ jsx25(
+  return /* @__PURE__ */ jsx29(
     ApprovalWaitingView,
     {
       status,
@@ -15455,10 +16336,10 @@ var RequestApproval = ({
 };
 
 // src/commands/spend-request/retrieve.tsx
-import { Box as Box19, Text as Text21 } from "ink";
-import Spinner11 from "ink-spinner";
+import { Box as Box21, Text as Text23 } from "ink";
+import Spinner13 from "ink-spinner";
 import { useEffect as useEffect11, useRef as useRef5, useState as useState11 } from "react";
-import { jsx as jsx26, jsxs as jsxs19 } from "react/jsx-runtime";
+import { jsx as jsx30, jsxs as jsxs21 } from "react/jsx-runtime";
 var TERMINAL_STATUSES = /* @__PURE__ */ new Set([
   "approved",
   "denied",
@@ -15582,121 +16463,121 @@ var RetrieveSpendRequest = ({
     };
   }, [phase, repository, id, include, timeout, onComplete]);
   if (phase === "fetching") {
-    return /* @__PURE__ */ jsx26(Box19, { children: /* @__PURE__ */ jsxs19(Text21, { color: "cyan", children: [
-      /* @__PURE__ */ jsx26(Spinner11, { type: "dots" }),
+    return /* @__PURE__ */ jsx30(Box21, { children: /* @__PURE__ */ jsxs21(Text23, { color: "cyan", children: [
+      /* @__PURE__ */ jsx30(Spinner13, { type: "dots" }),
       " Retrieving spend request ",
       id,
       "..."
     ] }) });
   }
   if (phase === "error") {
-    return /* @__PURE__ */ jsx26(Box19, { flexDirection: "column", children: /* @__PURE__ */ jsxs19(Text21, { color: "red", children: [
+    return /* @__PURE__ */ jsx30(Box21, { flexDirection: "column", children: /* @__PURE__ */ jsxs21(Text23, { color: "red", children: [
       "\u2717 ",
       error
     ] }) });
   }
   if (phase === "timeout") {
-    return /* @__PURE__ */ jsxs19(Box19, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsxs19(Text21, { color: "yellow", children: [
+    return /* @__PURE__ */ jsxs21(Box21, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsxs21(Text23, { color: "yellow", children: [
         "\u2717 Timed out waiting for approval after ",
         timeout,
         "s"
       ] }),
-      request && /* @__PURE__ */ jsxs19(Box19, { flexDirection: "column", marginTop: 1, paddingX: 2, children: [
-        /* @__PURE__ */ jsxs19(Text21, { children: [
+      request && /* @__PURE__ */ jsxs21(Box21, { flexDirection: "column", marginTop: 1, paddingX: 2, children: [
+        /* @__PURE__ */ jsxs21(Text23, { children: [
           "ID: ",
-          /* @__PURE__ */ jsx26(Text21, { bold: true, children: request.id })
+          /* @__PURE__ */ jsx30(Text23, { bold: true, children: request.id })
         ] }),
-        /* @__PURE__ */ jsxs19(Text21, { children: [
+        /* @__PURE__ */ jsxs21(Text23, { children: [
           "Status: ",
-          /* @__PURE__ */ jsx26(Text21, { bold: true, children: request.status })
+          /* @__PURE__ */ jsx30(Text23, { bold: true, children: request.status })
         ] })
       ] })
     ] });
   }
   if (phase === "polling") {
-    return /* @__PURE__ */ jsxs19(Box19, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsx26(Box19, { children: /* @__PURE__ */ jsxs19(Text21, { color: "cyan", children: [
-        /* @__PURE__ */ jsx26(Spinner11, { type: "dots" }),
+    return /* @__PURE__ */ jsxs21(Box21, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx30(Box21, { children: /* @__PURE__ */ jsxs21(Text23, { color: "cyan", children: [
+        /* @__PURE__ */ jsx30(Spinner13, { type: "dots" }),
         " Awaiting approval... (",
         elapsed,
         "s elapsed)"
       ] }) }),
-      request?.approval_url && /* @__PURE__ */ jsx26(Box19, { marginTop: 1, paddingX: 2, children: /* @__PURE__ */ jsxs19(Text21, { dimColor: true, children: [
+      request?.approval_url && /* @__PURE__ */ jsx30(Box21, { marginTop: 1, paddingX: 2, children: /* @__PURE__ */ jsxs21(Text23, { dimColor: true, children: [
         "Approval URL: ",
-        /* @__PURE__ */ jsx26(Text21, { color: "cyan", children: request.approval_url })
+        /* @__PURE__ */ jsx30(Text23, { color: "cyan", children: request.approval_url })
       ] }) })
     ] });
   }
   if (phase === "finalized") {
     const psd = request?.payment_status_details;
-    return /* @__PURE__ */ jsxs19(Box19, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsxs19(Text21, { color: "yellow", children: [
+    return /* @__PURE__ */ jsxs21(Box21, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsxs21(Text23, { color: "yellow", children: [
         "Spend request reached terminal status: ",
         request?.status
       ] }),
-      /* @__PURE__ */ jsxs19(Box19, { flexDirection: "column", marginTop: 1, paddingX: 2, children: [
-        /* @__PURE__ */ jsxs19(Text21, { children: [
+      /* @__PURE__ */ jsxs21(Box21, { flexDirection: "column", marginTop: 1, paddingX: 2, children: [
+        /* @__PURE__ */ jsxs21(Text23, { children: [
           "ID: ",
-          /* @__PURE__ */ jsx26(Text21, { bold: true, children: request?.id })
+          /* @__PURE__ */ jsx30(Text23, { bold: true, children: request?.id })
         ] }),
-        /* @__PURE__ */ jsxs19(Text21, { children: [
+        /* @__PURE__ */ jsxs21(Text23, { children: [
           "Status: ",
-          /* @__PURE__ */ jsx26(Text21, { bold: true, children: request?.status })
+          /* @__PURE__ */ jsx30(Text23, { bold: true, children: request?.status })
         ] }),
-        psd && /* @__PURE__ */ jsxs19(Box19, { flexDirection: "column", marginTop: 1, children: [
-          /* @__PURE__ */ jsx26(Text21, { bold: true, children: "Payment Details:" }),
-          /* @__PURE__ */ jsxs19(Text21, { children: [
+        psd && /* @__PURE__ */ jsxs21(Box21, { flexDirection: "column", marginTop: 1, children: [
+          /* @__PURE__ */ jsx30(Text23, { bold: true, children: "Payment Details:" }),
+          /* @__PURE__ */ jsxs21(Text23, { children: [
             "  ",
             "Outcome:",
             " ",
-            /* @__PURE__ */ jsx26(Text21, { bold: true, color: psd.outcome === "success" ? "green" : "red", children: psd.outcome })
+            /* @__PURE__ */ jsx30(Text23, { bold: true, color: psd.outcome === "success" ? "green" : "red", children: psd.outcome })
           ] }),
-          psd.code && /* @__PURE__ */ jsxs19(Text21, { children: [
+          psd.code && /* @__PURE__ */ jsxs21(Text23, { children: [
             "  ",
             "Code: ",
-            /* @__PURE__ */ jsx26(Text21, { bold: true, children: psd.code })
+            /* @__PURE__ */ jsx30(Text23, { bold: true, children: psd.code })
           ] }),
-          psd.decline_code && /* @__PURE__ */ jsxs19(Text21, { children: [
+          psd.decline_code && /* @__PURE__ */ jsxs21(Text23, { children: [
             "  ",
             "Decline Reason: ",
-            /* @__PURE__ */ jsx26(Text21, { bold: true, children: psd.decline_code })
+            /* @__PURE__ */ jsx30(Text23, { bold: true, children: psd.decline_code })
           ] }),
-          /* @__PURE__ */ jsxs19(Text21, { children: [
+          /* @__PURE__ */ jsxs21(Text23, { children: [
             "  ",
             "Amount:",
             " ",
-            /* @__PURE__ */ jsxs19(Text21, { bold: true, children: [
+            /* @__PURE__ */ jsxs21(Text23, { bold: true, children: [
               psd.amount,
               " ",
               psd.currency
             ] })
           ] }),
-          psd.created && /* @__PURE__ */ jsxs19(Text21, { children: [
+          psd.created && /* @__PURE__ */ jsxs21(Text23, { children: [
             "  ",
             "Charged At:",
             " ",
-            /* @__PURE__ */ jsx26(Text21, { bold: true, children: new Date(psd.created * 1e3).toISOString() })
+            /* @__PURE__ */ jsx30(Text23, { bold: true, children: new Date(psd.created * 1e3).toISOString() })
           ] }),
-          psd.refund_details && /* @__PURE__ */ jsxs19(Box19, { flexDirection: "column", marginTop: 1, children: [
-            /* @__PURE__ */ jsxs19(Text21, { bold: true, children: [
+          psd.refund_details && /* @__PURE__ */ jsxs21(Box21, { flexDirection: "column", marginTop: 1, children: [
+            /* @__PURE__ */ jsxs21(Text23, { bold: true, children: [
               "  ",
               "Refund:"
             ] }),
-            /* @__PURE__ */ jsxs19(Text21, { children: [
+            /* @__PURE__ */ jsxs21(Text23, { children: [
               "    ",
               "Amount:",
               " ",
-              /* @__PURE__ */ jsxs19(Text21, { bold: true, children: [
+              /* @__PURE__ */ jsxs21(Text23, { bold: true, children: [
                 psd.refund_details.amount,
                 " ",
                 psd.refund_details.currency
               ] })
             ] }),
-            /* @__PURE__ */ jsxs19(Text21, { children: [
+            /* @__PURE__ */ jsxs21(Text23, { children: [
               "    ",
               "State: ",
-              /* @__PURE__ */ jsx26(Text21, { bold: true, children: psd.refund_details.state })
+              /* @__PURE__ */ jsx30(Text23, { bold: true, children: psd.refund_details.state })
             ] })
           ] })
         ] })
@@ -15704,71 +16585,71 @@ var RetrieveSpendRequest = ({
     ] });
   }
   if (phase === "declined") {
-    return /* @__PURE__ */ jsxs19(Box19, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsx26(Text21, { color: "red", children: "\u2717 Spend request declined" }),
-      /* @__PURE__ */ jsxs19(Box19, { flexDirection: "column", marginTop: 1, paddingX: 2, children: [
-        /* @__PURE__ */ jsxs19(Text21, { children: [
+    return /* @__PURE__ */ jsxs21(Box21, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx30(Text23, { color: "red", children: "\u2717 Spend request declined" }),
+      /* @__PURE__ */ jsxs21(Box21, { flexDirection: "column", marginTop: 1, paddingX: 2, children: [
+        /* @__PURE__ */ jsxs21(Text23, { children: [
           "ID: ",
-          /* @__PURE__ */ jsx26(Text21, { bold: true, children: request?.id })
+          /* @__PURE__ */ jsx30(Text23, { bold: true, children: request?.id })
         ] }),
-        /* @__PURE__ */ jsxs19(Text21, { children: [
+        /* @__PURE__ */ jsxs21(Text23, { children: [
           "Status:",
           " ",
-          /* @__PURE__ */ jsx26(Text21, { bold: true, color: "red", children: request?.status })
+          /* @__PURE__ */ jsx30(Text23, { bold: true, color: "red", children: request?.status })
         ] }),
-        /* @__PURE__ */ jsxs19(Text21, { children: [
+        /* @__PURE__ */ jsxs21(Text23, { children: [
           "Amount:",
           " ",
-          /* @__PURE__ */ jsx26(Text21, { bold: true, children: request?.amount != null ? String(request.amount) : "N/A" })
+          /* @__PURE__ */ jsx30(Text23, { bold: true, children: request?.amount != null ? String(request.amount) : "N/A" })
         ] }),
-        /* @__PURE__ */ jsxs19(Text21, { children: [
+        /* @__PURE__ */ jsxs21(Text23, { children: [
           "Merchant: ",
-          /* @__PURE__ */ jsx26(Text21, { bold: true, children: request?.merchant_name })
+          /* @__PURE__ */ jsx30(Text23, { bold: true, children: request?.merchant_name })
         ] })
       ] })
     ] });
   }
-  return /* @__PURE__ */ jsxs19(Box19, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsx26(Text21, { color: "green", children: "\u2713 Spend request approved" }),
-    /* @__PURE__ */ jsxs19(Box19, { flexDirection: "column", marginTop: 1, paddingX: 2, children: [
-      /* @__PURE__ */ jsxs19(Text21, { children: [
+  return /* @__PURE__ */ jsxs21(Box21, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx30(Text23, { color: "green", children: "\u2713 Spend request approved" }),
+    /* @__PURE__ */ jsxs21(Box21, { flexDirection: "column", marginTop: 1, paddingX: 2, children: [
+      /* @__PURE__ */ jsxs21(Text23, { children: [
         "ID: ",
-        /* @__PURE__ */ jsx26(Text21, { bold: true, children: request?.id })
+        /* @__PURE__ */ jsx30(Text23, { bold: true, children: request?.id })
       ] }),
-      /* @__PURE__ */ jsxs19(Text21, { children: [
+      /* @__PURE__ */ jsxs21(Text23, { children: [
         "Status:",
         " ",
-        /* @__PURE__ */ jsx26(Text21, { bold: true, color: "green", children: request?.status })
+        /* @__PURE__ */ jsx30(Text23, { bold: true, color: "green", children: request?.status })
       ] }),
-      /* @__PURE__ */ jsxs19(Text21, { children: [
+      /* @__PURE__ */ jsxs21(Text23, { children: [
         "Amount:",
         " ",
-        /* @__PURE__ */ jsx26(Text21, { bold: true, children: request?.amount != null ? String(request.amount) : "N/A" })
+        /* @__PURE__ */ jsx30(Text23, { bold: true, children: request?.amount != null ? String(request.amount) : "N/A" })
       ] }),
-      /* @__PURE__ */ jsxs19(Text21, { children: [
+      /* @__PURE__ */ jsxs21(Text23, { children: [
         "Merchant: ",
-        /* @__PURE__ */ jsx26(Text21, { bold: true, children: request?.merchant_name })
+        /* @__PURE__ */ jsx30(Text23, { bold: true, children: request?.merchant_name })
       ] }),
-      /* @__PURE__ */ jsxs19(Text21, { children: [
+      /* @__PURE__ */ jsxs21(Text23, { children: [
         "Line Items:",
         " ",
-        /* @__PURE__ */ jsx26(Text21, { bold: true, children: request?.line_items.map((li) => li.name).join(", ") })
+        /* @__PURE__ */ jsx30(Text23, { bold: true, children: request?.line_items.map((li) => li.name).join(", ") })
       ] }),
-      request?.link_pay_token && /* @__PURE__ */ jsxs19(Box19, { flexDirection: "column", marginTop: 1, children: [
-        /* @__PURE__ */ jsx26(Text21, { bold: true, children: "Link Pay Token:" }),
-        /* @__PURE__ */ jsxs19(Text21, { children: [
+      request?.link_pay_token && /* @__PURE__ */ jsxs21(Box21, { flexDirection: "column", marginTop: 1, children: [
+        /* @__PURE__ */ jsx30(Text23, { bold: true, children: "Link Pay Token:" }),
+        /* @__PURE__ */ jsxs21(Text23, { children: [
           " ",
-          /* @__PURE__ */ jsx26(Text21, { bold: true, children: request.link_pay_token })
+          /* @__PURE__ */ jsx30(Text23, { bold: true, children: request.link_pay_token })
         ] })
       ] }),
-      request?.payment_status_details && /* @__PURE__ */ jsxs19(Box19, { flexDirection: "column", marginTop: 1, children: [
-        /* @__PURE__ */ jsx26(Text21, { bold: true, children: "Last Payment Attempt:" }),
-        /* @__PURE__ */ jsxs19(Text21, { children: [
+      request?.payment_status_details && /* @__PURE__ */ jsxs21(Box21, { flexDirection: "column", marginTop: 1, children: [
+        /* @__PURE__ */ jsx30(Text23, { bold: true, children: "Last Payment Attempt:" }),
+        /* @__PURE__ */ jsxs21(Text23, { children: [
           "  ",
           "Outcome:",
           " ",
-          /* @__PURE__ */ jsx26(
-            Text21,
+          /* @__PURE__ */ jsx30(
+            Text23,
             {
               bold: true,
               color: request.payment_status_details.outcome === "success" ? "green" : "red",
@@ -15776,79 +16657,79 @@ var RetrieveSpendRequest = ({
             }
           )
         ] }),
-        request.payment_status_details.code && /* @__PURE__ */ jsxs19(Text21, { children: [
+        request.payment_status_details.code && /* @__PURE__ */ jsxs21(Text23, { children: [
           "  ",
           "Code:",
           " ",
-          /* @__PURE__ */ jsx26(Text21, { bold: true, children: request.payment_status_details.code })
+          /* @__PURE__ */ jsx30(Text23, { bold: true, children: request.payment_status_details.code })
         ] }),
-        request.payment_status_details.decline_code && /* @__PURE__ */ jsxs19(Text21, { children: [
+        request.payment_status_details.decline_code && /* @__PURE__ */ jsxs21(Text23, { children: [
           "  ",
           "Decline Reason:",
           " ",
-          /* @__PURE__ */ jsx26(Text21, { bold: true, children: request.payment_status_details.decline_code })
+          /* @__PURE__ */ jsx30(Text23, { bold: true, children: request.payment_status_details.decline_code })
         ] })
       ] }),
-      request?.shared_payment_token && /* @__PURE__ */ jsxs19(Box19, { flexDirection: "column", marginTop: 1, children: [
-        /* @__PURE__ */ jsxs19(Text21, { bold: true, children: [
+      request?.shared_payment_token && /* @__PURE__ */ jsxs21(Box21, { flexDirection: "column", marginTop: 1, children: [
+        /* @__PURE__ */ jsxs21(Text23, { bold: true, children: [
           "\x1B]8;;https://docs.stripe.com/agentic-commerce/concepts/shared-payment-tokens\x07",
           "Shared Payment Token",
           "\x1B]8;;\x07",
           ":"
         ] }),
-        /* @__PURE__ */ jsxs19(Text21, { children: [
+        /* @__PURE__ */ jsxs21(Text23, { children: [
           " ",
           "Token: ",
-          /* @__PURE__ */ jsx26(Text21, { bold: true, children: request.shared_payment_token.id })
+          /* @__PURE__ */ jsx30(Text23, { bold: true, children: request.shared_payment_token.id })
         ] })
       ] }),
-      request?.card && !outputFile && /* @__PURE__ */ jsxs19(Box19, { flexDirection: "column", marginTop: 1, children: [
-        /* @__PURE__ */ jsx26(Text21, { bold: true, children: "Card Details:" }),
-        /* @__PURE__ */ jsxs19(Text21, { children: [
+      request?.card && !outputFile && /* @__PURE__ */ jsxs21(Box21, { flexDirection: "column", marginTop: 1, children: [
+        /* @__PURE__ */ jsx30(Text23, { bold: true, children: "Card Details:" }),
+        /* @__PURE__ */ jsxs21(Text23, { children: [
           " ",
           "Number: ",
-          /* @__PURE__ */ jsx26(Text21, { bold: true, children: request?.card.number })
+          /* @__PURE__ */ jsx30(Text23, { bold: true, children: request?.card.number })
         ] }),
-        /* @__PURE__ */ jsxs19(Text21, { children: [
+        /* @__PURE__ */ jsxs21(Text23, { children: [
           " ",
           "Brand: ",
-          /* @__PURE__ */ jsx26(Text21, { bold: true, children: request?.card.brand })
+          /* @__PURE__ */ jsx30(Text23, { bold: true, children: request?.card.brand })
         ] }),
-        /* @__PURE__ */ jsxs19(Text21, { children: [
+        /* @__PURE__ */ jsxs21(Text23, { children: [
           " ",
           "Expiry:",
           " ",
-          /* @__PURE__ */ jsxs19(Text21, { bold: true, children: [
+          /* @__PURE__ */ jsxs21(Text23, { bold: true, children: [
             String(request?.card.exp_month).padStart(2, "0"),
             "/",
             request?.card.exp_year
           ] })
         ] }),
-        request?.card.cvc && /* @__PURE__ */ jsxs19(Text21, { children: [
+        request?.card.cvc && /* @__PURE__ */ jsxs21(Text23, { children: [
           " ",
           "CVC: ",
-          /* @__PURE__ */ jsx26(Text21, { bold: true, children: request.card.cvc })
+          /* @__PURE__ */ jsx30(Text23, { bold: true, children: request.card.cvc })
         ] }),
-        request?.card.valid_until && /* @__PURE__ */ jsxs19(Text21, { children: [
+        request?.card.valid_until && /* @__PURE__ */ jsxs21(Text23, { children: [
           " ",
           "Valid Until: ",
-          /* @__PURE__ */ jsx26(Text21, { bold: true, children: request.card.valid_until })
+          /* @__PURE__ */ jsx30(Text23, { bold: true, children: request.card.valid_until })
         ] }),
-        request?.card.billing_address && /* @__PURE__ */ jsxs19(Box19, { flexDirection: "column", marginTop: 1, children: [
-          /* @__PURE__ */ jsx26(Text21, { bold: true, children: " Billing Address:" }),
-          /* @__PURE__ */ jsxs19(Text21, { children: [
+        request?.card.billing_address && /* @__PURE__ */ jsxs21(Box21, { flexDirection: "column", marginTop: 1, children: [
+          /* @__PURE__ */ jsx30(Text23, { bold: true, children: " Billing Address:" }),
+          /* @__PURE__ */ jsxs21(Text23, { children: [
             "  ",
             request.card.billing_address.name
           ] }),
-          /* @__PURE__ */ jsxs19(Text21, { children: [
+          /* @__PURE__ */ jsxs21(Text23, { children: [
             "  ",
             request.card.billing_address.line1
           ] }),
-          request.card.billing_address.line2 && /* @__PURE__ */ jsxs19(Text21, { children: [
+          request.card.billing_address.line2 && /* @__PURE__ */ jsxs21(Text23, { children: [
             "  ",
             request.card.billing_address.line2
           ] }),
-          /* @__PURE__ */ jsxs19(Text21, { children: [
+          /* @__PURE__ */ jsxs21(Text23, { children: [
             "  ",
             [
               request.card.billing_address.city,
@@ -15856,18 +16737,18 @@ var RetrieveSpendRequest = ({
               request.card.billing_address.postal_code
             ].filter(Boolean).join(", ")
           ] }),
-          /* @__PURE__ */ jsxs19(Text21, { children: [
+          /* @__PURE__ */ jsxs21(Text23, { children: [
             "  ",
             request.card.billing_address.country
           ] })
         ] })
       ] }),
-      request?.card && outputFile && /* @__PURE__ */ jsxs19(Box19, { flexDirection: "column", marginTop: 1, children: [
-        outputFilePath && /* @__PURE__ */ jsxs19(Text21, { color: "green", children: [
+      request?.card && outputFile && /* @__PURE__ */ jsxs21(Box21, { flexDirection: "column", marginTop: 1, children: [
+        outputFilePath && /* @__PURE__ */ jsxs21(Text23, { color: "green", children: [
           "Card credentials written to ",
-          /* @__PURE__ */ jsx26(Text21, { bold: true, children: outputFilePath })
+          /* @__PURE__ */ jsx30(Text23, { bold: true, children: outputFilePath })
         ] }),
-        fileError && /* @__PURE__ */ jsxs19(Text21, { color: "red", children: [
+        fileError && /* @__PURE__ */ jsxs21(Text23, { color: "red", children: [
           "Failed to write card file: ",
           fileError
         ] })
@@ -15877,140 +16758,143 @@ var RetrieveSpendRequest = ({
 };
 
 // src/commands/spend-request/schema.ts
-import { z as z8 } from "incur";
-var createOptions = z8.object({
-  paymentMethodId: z8.string().optional().describe("Payment method ID"),
-  credentialType: z8.enum(["shared_payment_token", "card"]).default("card").describe(
+import { z as z10 } from "incur";
+var createOptions = z10.object({
+  paymentMethodId: z10.string().optional().describe("Payment method ID"),
+  credentialType: z10.enum(["shared_payment_token", "card"]).default("card").describe(
     '"card" for checkout forms/Stripe Elements; "shared_payment_token" for HTTP 402/machine payment flows'
   ),
-  networkId: z8.string().optional().describe(
+  networkId: z10.string().optional().describe(
     "Network ID (required for shared_payment_token) \u2014 use `link-cli mpp decode` to extract"
   ),
-  amount: z8.coerce.number().int().positive().max(5e5).describe("Amount in cents, max 500000 ($5,000.00)"),
-  currency: z8.string().length(3).default("usd").describe("Currency code"),
-  merchantName: z8.string().optional().describe(
+  amount: z10.coerce.number().int().positive().max(5e5).describe("Amount in cents, max 500000 ($5,000.00)"),
+  currency: z10.string().length(3).default("usd").describe("Currency code"),
+  merchantName: z10.string().optional().describe(
     "Merchant name (required for card; forbidden for shared_payment_token)"
   ),
-  merchantUrl: z8.string().optional().describe(
+  merchantUrl: z10.string().optional().describe(
     "Merchant URL (required for card; forbidden for shared_payment_token)"
   ),
-  context: z8.string().min(100).describe(
+  context: z10.string().min(100).describe(
     "Min 100 chars \u2014 describe the purchase and rationale; the user reads this when approving"
   ),
-  lineItem: z8.array(z8.union([z8.string(), z8.record(z8.string(), z8.unknown())])).default([]).describe(
+  lineItem: z10.array(z10.union([z10.string(), z10.record(z10.string(), z10.unknown())])).default([]).describe(
     'Line item (repeatable, key:value format). Keys: name (required), quantity, unit_amount, description, sku, url, image_url, product_url. Example: "name:Shoes,unit_amount:5000,quantity:2"'
   ),
-  total: z8.array(z8.union([z8.string(), z8.record(z8.string(), z8.unknown())])).default([]).describe(
+  total: z10.array(z10.union([z10.string(), z10.record(z10.string(), z10.unknown())])).default([]).describe(
     'Total (repeatable, key:value format). Keys: type (required; one of: subtotal, tax, total, items_base_amount, items_discount, discount, fulfillment, shipping, fee, gift_wrap, tip, store_credit), display_text (required), amount (required). Example: "type:total,display_text:Total,amount:5000"'
   ),
-  requestApproval: z8.boolean().default(true).describe("Request approval and poll until approved/denied/expired"),
-  test: z8.boolean().default(false).describe(
+  requestApproval: z10.boolean().default(true).describe("Request approval and poll until approved/denied/expired"),
+  test: z10.boolean().default(false).describe(
     "Use test mode (creates testmode credentials from test card data)"
   ),
-  approve: z8.boolean().default(false).describe(""),
-  outputFile: z8.string().optional().describe(
+  approve: z10.boolean().default(false).describe(""),
+  outputFile: z10.string().optional().describe(
     "Write full card credentials to this file path; stdout shows redacted card data only"
   ),
-  force: z8.boolean().default(false).describe("Overwrite output file if it already exists")
+  force: z10.boolean().default(false).describe("Overwrite output file if it already exists"),
+  approvalDetail: z10.union([z10.string(), z10.record(z10.string(), z10.unknown())]).optional().describe(
+    "Approval details object (MCP/agent: pass as object; CLI: pass as JSON string). Required fields: approved_at (unix timestamp), approval_method (click|programmatic|voice), app_name, external_user_id. Optional: ip_address, user_agent, device_type (mobile|web), agent_log_id, external_user_name, external_session_id, authentication_method (biometric_face|biometric_fingerprint|passkey)."
+  )
 });
-var listOptions = z8.object({
-  includeHistory: z8.boolean().default(false).describe("Include expired and terminal spend requests")
+var listOptions3 = z10.object({
+  includeHistory: z10.boolean().default(false).describe("Include expired and terminal spend requests")
 });
-var retrieveOptions = z8.object({
-  timeout: z8.coerce.number().default(600).describe(
+var retrieveOptions = z10.object({
+  timeout: z10.coerce.number().default(600).describe(
     "Polling timeout in seconds. When reached during active polling, exits non-zero with POLLING_TIMEOUT. Default exceeds the server-side spend-request expiry so polling outlives the request itself."
   ),
-  interval: z8.coerce.number().default(0).describe(
+  interval: z10.coerce.number().default(0).describe(
     "Poll interval in seconds. When > 0, polls until status is terminal, timeout is reached, or max attempts are exhausted."
   ),
-  maxAttempts: z8.coerce.number().default(0).describe(
+  maxAttempts: z10.coerce.number().default(0).describe(
     "Max poll attempts. 0 = unlimited. Exhaustion during active polling exits non-zero with POLLING_TIMEOUT."
   ),
-  include: z8.array(z8.string()).default([]).describe("Include extra data (repeatable, e.g. --include card)"),
-  outputFile: z8.string().optional().describe(
+  include: z10.array(z10.string()).default([]).describe("Include extra data (repeatable, e.g. --include card)"),
+  outputFile: z10.string().optional().describe(
     "Write full card credentials to this file path; stdout shows redacted card data only"
   ),
-  force: z8.boolean().default(false).describe("Overwrite output file if it already exists")
+  force: z10.boolean().default(false).describe("Overwrite output file if it already exists")
 });
-var updateOptions = z8.object({
-  paymentMethodId: z8.string().optional().describe("Payment method ID"),
-  amount: z8.coerce.number().optional().describe("Amount in cents"),
-  merchantUrl: z8.string().optional().describe("Merchant URL"),
-  profileId: z8.string().optional().describe("Profile ID"),
-  merchantId: z8.string().optional().describe("Merchant ID"),
-  currency: z8.string().optional().describe("Currency code"),
-  lineItem: z8.array(z8.union([z8.string(), z8.record(z8.string(), z8.unknown())])).default([]).describe(
+var updateOptions = z10.object({
+  paymentMethodId: z10.string().optional().describe("Payment method ID"),
+  amount: z10.coerce.number().optional().describe("Amount in cents"),
+  merchantUrl: z10.string().optional().describe("Merchant URL"),
+  profileId: z10.string().optional().describe("Profile ID"),
+  merchantId: z10.string().optional().describe("Merchant ID"),
+  currency: z10.string().optional().describe("Currency code"),
+  lineItem: z10.array(z10.union([z10.string(), z10.record(z10.string(), z10.unknown())])).default([]).describe(
     'Line item (repeatable, key:value format). Keys: name (required), quantity, unit_amount, description, sku, url, image_url, product_url. Example: "name:Shoes,unit_amount:5000,quantity:2"'
   ),
-  total: z8.array(z8.union([z8.string(), z8.record(z8.string(), z8.unknown())])).default([]).describe(
+  total: z10.array(z10.union([z10.string(), z10.record(z10.string(), z10.unknown())])).default([]).describe(
     'Total (repeatable, key:value format). Keys: type (required; one of: subtotal, tax, total, items_base_amount, items_discount, discount, fulfillment, shipping, fee, gift_wrap, tip, store_credit), display_text (required), amount (required). Example: "type:total,display_text:Total,amount:5000"'
   )
 });
 
 // src/commands/spend-request/update.tsx
-import { Box as Box20, Text as Text22 } from "ink";
-import Spinner12 from "ink-spinner";
-import { useCallback as useCallback9 } from "react";
-import { jsx as jsx27, jsxs as jsxs20 } from "react/jsx-runtime";
+import { Box as Box22, Text as Text24 } from "ink";
+import Spinner14 from "ink-spinner";
+import { useCallback as useCallback11 } from "react";
+import { jsx as jsx31, jsxs as jsxs22 } from "react/jsx-runtime";
 var UpdateSpendRequest = ({
   repository,
   id,
   params,
   onComplete
 }) => {
-  const action = useCallback9(
+  const action = useCallback11(
     () => repository.updateSpendRequest(id, params),
     [repository, id, params]
   );
   const { status, data: request, error } = useAsyncAction(action, onComplete);
   if (status === "loading") {
-    return /* @__PURE__ */ jsx27(Box20, { children: /* @__PURE__ */ jsxs20(Text22, { color: "cyan", children: [
-      /* @__PURE__ */ jsx27(Spinner12, { type: "dots" }),
+    return /* @__PURE__ */ jsx31(Box22, { children: /* @__PURE__ */ jsxs22(Text24, { color: "cyan", children: [
+      /* @__PURE__ */ jsx31(Spinner14, { type: "dots" }),
       " Updating spend request ",
       id,
       "..."
     ] }) });
   }
   if (status === "error") {
-    return /* @__PURE__ */ jsxs20(Box20, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsx27(Text22, { color: "red", children: "\u2717 Failed to update spend request" }),
-      /* @__PURE__ */ jsx27(Text22, { color: "red", children: error })
+    return /* @__PURE__ */ jsxs22(Box22, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx31(Text24, { color: "red", children: "\u2717 Failed to update spend request" }),
+      /* @__PURE__ */ jsx31(Text24, { color: "red", children: error })
     ] });
   }
-  return /* @__PURE__ */ jsxs20(Box20, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsx27(Text22, { color: "green", children: "\u2713 Spend request updated" }),
-    /* @__PURE__ */ jsxs20(Box20, { flexDirection: "column", marginTop: 1, paddingX: 2, children: [
-      /* @__PURE__ */ jsxs20(Text22, { children: [
+  return /* @__PURE__ */ jsxs22(Box22, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx31(Text24, { color: "green", children: "\u2713 Spend request updated" }),
+    /* @__PURE__ */ jsxs22(Box22, { flexDirection: "column", marginTop: 1, paddingX: 2, children: [
+      /* @__PURE__ */ jsxs22(Text24, { children: [
         "ID: ",
-        /* @__PURE__ */ jsx27(Text22, { bold: true, children: request?.id })
+        /* @__PURE__ */ jsx31(Text24, { bold: true, children: request?.id })
       ] }),
-      /* @__PURE__ */ jsxs20(Text22, { children: [
+      /* @__PURE__ */ jsxs22(Text24, { children: [
         "Status: ",
-        /* @__PURE__ */ jsx27(Text22, { bold: true, children: request?.status })
+        /* @__PURE__ */ jsx31(Text24, { bold: true, children: request?.status })
       ] }),
-      /* @__PURE__ */ jsxs20(Text22, { children: [
+      /* @__PURE__ */ jsxs22(Text24, { children: [
         "Amount:",
         " ",
-        /* @__PURE__ */ jsx27(Text22, { bold: true, children: (() => {
+        /* @__PURE__ */ jsx31(Text24, { bold: true, children: (() => {
           const t = request?.totals.find((t2) => t2.type === "total");
           return t ? String(t.amount) : "N/A";
         })() })
       ] }),
-      /* @__PURE__ */ jsxs20(Text22, { children: [
+      /* @__PURE__ */ jsxs22(Text24, { children: [
         "Merchant: ",
-        /* @__PURE__ */ jsx27(Text22, { bold: true, children: request?.merchant_name })
+        /* @__PURE__ */ jsx31(Text24, { bold: true, children: request?.merchant_name })
       ] }),
-      /* @__PURE__ */ jsxs20(Text22, { children: [
+      /* @__PURE__ */ jsxs22(Text24, { children: [
         "Line Items:",
         " ",
-        /* @__PURE__ */ jsx27(Text22, { bold: true, children: request?.line_items.map((li) => li.name).join(", ") })
+        /* @__PURE__ */ jsx31(Text24, { bold: true, children: request?.line_items.map((li) => li.name).join(", ") })
       ] })
     ] })
   ] });
 };
 
 // src/commands/spend-request/index.tsx
-import { jsx as jsx28 } from "react/jsx-runtime";
+import { jsx as jsx32 } from "react/jsx-runtime";
 async function applyOutputFile(request, outputFile, force) {
   if (!outputFile || !request.card) return request;
   const fileData = {
@@ -16029,19 +16913,19 @@ async function applyOutputFile(request, outputFile, force) {
   };
 }
 function createSpendRequestCli(repository, authStorage2, envAccessToken2) {
-  const cli2 = Cli9.create("spend-request", {
+  const cli2 = Cli11.create("spend-request", {
     description: "Spend request management commands"
   });
   cli2.command("list", {
     description: "List spend requests. By default returns only active requests (created, pending_approval, approved). Use --include-history to return all spend requests including expired and terminal states.",
     outputPolicy: "agent-only",
-    options: listOptions,
+    options: listOptions3,
     middleware: [requireAuth(authStorage2, envAccessToken2)],
     async run(c) {
       const opts = { includeHistory: c.options.includeHistory ?? false };
       if (!c.agent && !c.formatExplicit) {
         return renderInteractive(
-          /* @__PURE__ */ jsx28(
+          /* @__PURE__ */ jsx32(
             SpendRequestList,
             {
               repository,
@@ -16105,6 +16989,7 @@ function createSpendRequestCli(repository, authStorage2, envAccessToken2) {
       const totals = opts.total?.length ? opts.total.map(
         (item) => typeof item === "string" ? parseTotalFlag(item) : item
       ) : void 0;
+      const approvalDetails = opts.approvalDetail !== void 0 ? typeof opts.approvalDetail === "string" ? JSON.parse(opts.approvalDetail) : opts.approvalDetail : void 0;
       const createParams = {
         payment_details: opts.paymentMethodId,
         credential_type: credentialType,
@@ -16118,14 +17003,15 @@ function createSpendRequestCli(repository, authStorage2, envAccessToken2) {
         totals,
         request_approval: requestApproval || void 0,
         test: opts.test ? true : void 0,
-        approve: opts.approve ? true : void 0
+        approve: opts.approve ? true : void 0,
+        approval_details: approvalDetails
       };
       const outputFile = opts.outputFile;
       const forceOverwrite = opts.force;
       if (!c.agent && !c.formatExplicit) {
         let capturedResult = void 0;
         return renderInteractive(
-          /* @__PURE__ */ jsx28(
+          /* @__PURE__ */ jsx32(
             CreateSpendRequest,
             {
               repository,
@@ -16185,8 +17071,8 @@ function createSpendRequestCli(repository, authStorage2, envAccessToken2) {
   });
   cli2.command("update", {
     description: "Update a spend request",
-    args: z9.object({
-      id: z9.string().describe("Spend request ID")
+    args: z11.object({
+      id: z11.string().describe("Spend request ID")
     }),
     options: updateOptions,
     outputPolicy: "agent-only",
@@ -16214,7 +17100,7 @@ function createSpendRequestCli(repository, authStorage2, envAccessToken2) {
       if (!c.agent && !c.formatExplicit) {
         let capturedResult = null;
         return renderInteractive(
-          /* @__PURE__ */ jsx28(
+          /* @__PURE__ */ jsx32(
             UpdateSpendRequest,
             {
               repository,
@@ -16237,8 +17123,8 @@ function createSpendRequestCli(repository, authStorage2, envAccessToken2) {
   });
   cli2.command("request-approval", {
     description: "Request approval for a spend request",
-    args: z9.object({
-      id: z9.string().describe("Spend request ID")
+    args: z11.object({
+      id: z11.string().describe("Spend request ID")
     }),
     outputPolicy: "agent-only",
     async *run(c) {
@@ -16247,7 +17133,7 @@ function createSpendRequestCli(repository, authStorage2, envAccessToken2) {
       if (!c.agent && !c.formatExplicit) {
         let capturedResult = void 0;
         return renderInteractive(
-          /* @__PURE__ */ jsx28(
+          /* @__PURE__ */ jsx32(
             RequestApproval,
             {
               repository,
@@ -16292,8 +17178,8 @@ function createSpendRequestCli(repository, authStorage2, envAccessToken2) {
   });
   cli2.command("retrieve", {
     description: "Retrieve a spend request",
-    args: z9.object({
-      id: z9.string().describe("Spend request ID")
+    args: z11.object({
+      id: z11.string().describe("Spend request ID")
     }),
     options: retrieveOptions,
     outputPolicy: "agent-only",
@@ -16311,7 +17197,7 @@ function createSpendRequestCli(repository, authStorage2, envAccessToken2) {
       if (!c.agent && !c.formatExplicit) {
         let capturedResult = null;
         return renderInteractive(
-          /* @__PURE__ */ jsx28(
+          /* @__PURE__ */ jsx32(
             RetrieveSpendRequest,
             {
               repository,
@@ -16383,8 +17269,8 @@ function createSpendRequestCli(repository, authStorage2, envAccessToken2) {
   });
   cli2.command("cancel", {
     description: "Cancel a spend request",
-    args: z9.object({
-      id: z9.string().describe("Spend request ID")
+    args: z11.object({
+      id: z11.string().describe("Spend request ID")
     }),
     outputPolicy: "agent-only",
     middleware: [requireAuth(authStorage2, envAccessToken2)],
@@ -16393,7 +17279,7 @@ function createSpendRequestCli(repository, authStorage2, envAccessToken2) {
       if (!c.agent && !c.formatExplicit) {
         let capturedResult = null;
         return renderInteractive(
-          /* @__PURE__ */ jsx28(
+          /* @__PURE__ */ jsx32(
             CancelSpendRequest,
             {
               repository,
@@ -16417,20 +17303,20 @@ function createSpendRequestCli(repository, authStorage2, envAccessToken2) {
 }
 
 // src/commands/transactions/index.tsx
-import { Cli as Cli10 } from "incur";
+import { Cli as Cli12 } from "incur";
 
 // src/commands/transactions/list.tsx
-import { Box as Box21, Text as Text23 } from "ink";
-import Spinner13 from "ink-spinner";
-import { useCallback as useCallback10 } from "react";
-import { jsx as jsx29, jsxs as jsxs21 } from "react/jsx-runtime";
-var COLUMN_GAP = "  ";
+import { Box as Box23, Text as Text25 } from "ink";
+import Spinner15 from "ink-spinner";
+import { useCallback as useCallback12 } from "react";
+import { jsx as jsx33, jsxs as jsxs23 } from "react/jsx-runtime";
+var COLUMN_GAP3 = "  ";
 var DATE_WIDTH = 10;
 var AMOUNT_WIDTH = 13;
 var STATUS_WIDTH = 10;
 var CATEGORY_WIDTH = 16;
 var MIN_DESCRIPTION_WIDTH = 16;
-var HORIZONTAL_PADDING = 4;
+var HORIZONTAL_PADDING2 = 4;
 function formatAmount(amount, currency) {
   const currencyCode = currency.toUpperCase();
   try {
@@ -16444,7 +17330,7 @@ function formatAmount(amount, currency) {
     return `${amount} ${currency}`;
   }
 }
-function truncateCell(value, width) {
+function truncateCell3(value, width) {
   if (value.length <= width) {
     return value;
   }
@@ -16453,8 +17339,8 @@ function truncateCell(value, width) {
   }
   return `${value.slice(0, width - 3)}...`;
 }
-function formatCell(value, width, align = "left") {
-  const truncated = truncateCell(value, width);
+function formatCell3(value, width, align = "left") {
+  const truncated = truncateCell3(value, width);
   return align === "right" ? truncated.padStart(width) : truncated.padEnd(width);
 }
 var TransactionsList = ({
@@ -16462,7 +17348,7 @@ var TransactionsList = ({
   params,
   onComplete
 }) => {
-  const action = useCallback10(
+  const action = useCallback12(
     () => resource.listTransactions(params),
     [resource, params]
   );
@@ -16472,80 +17358,80 @@ var TransactionsList = ({
   const terminalWidth = process.stdout.columns ?? 100;
   const descriptionWidth = Math.max(
     MIN_DESCRIPTION_WIDTH,
-    terminalWidth - HORIZONTAL_PADDING - DATE_WIDTH - AMOUNT_WIDTH - STATUS_WIDTH - CATEGORY_WIDTH - COLUMN_GAP.length * 4
+    terminalWidth - HORIZONTAL_PADDING2 - DATE_WIDTH - AMOUNT_WIDTH - STATUS_WIDTH - CATEGORY_WIDTH - COLUMN_GAP3.length * 4
   );
   const headerRow = [
-    formatCell("Date", DATE_WIDTH),
-    formatCell("Amount", AMOUNT_WIDTH, "right"),
-    formatCell("Status", STATUS_WIDTH),
-    formatCell("Category", CATEGORY_WIDTH),
-    formatCell("Description", descriptionWidth)
-  ].join(COLUMN_GAP);
+    formatCell3("Date", DATE_WIDTH),
+    formatCell3("Amount", AMOUNT_WIDTH, "right"),
+    formatCell3("Status", STATUS_WIDTH),
+    formatCell3("Category", CATEGORY_WIDTH),
+    formatCell3("Description", descriptionWidth)
+  ].join(COLUMN_GAP3);
   const separatorRow = "-".repeat(headerRow.length);
   const rows = transactions.map(
     (txn) => [
-      formatCell(txn.created_date, DATE_WIDTH),
-      formatCell(formatAmount(txn.amount, txn.currency), AMOUNT_WIDTH, "right"),
-      formatCell(txn.status, STATUS_WIDTH),
-      formatCell(txn.category ?? "", CATEGORY_WIDTH),
-      formatCell(txn.description, descriptionWidth)
-    ].join(COLUMN_GAP)
+      formatCell3(txn.created_date, DATE_WIDTH),
+      formatCell3(formatAmount(txn.amount, txn.currency), AMOUNT_WIDTH, "right"),
+      formatCell3(txn.status, STATUS_WIDTH),
+      formatCell3(txn.category ?? "", CATEGORY_WIDTH),
+      formatCell3(txn.description, descriptionWidth)
+    ].join(COLUMN_GAP3)
   );
   if (status === "loading") {
-    return /* @__PURE__ */ jsx29(Box21, { children: /* @__PURE__ */ jsxs21(Text23, { color: "cyan", children: [
-      /* @__PURE__ */ jsx29(Spinner13, { type: "dots" }),
+    return /* @__PURE__ */ jsx33(Box23, { children: /* @__PURE__ */ jsxs23(Text25, { color: "cyan", children: [
+      /* @__PURE__ */ jsx33(Spinner15, { type: "dots" }),
       " Loading transactions..."
     ] }) });
   }
   if (status === "error") {
-    return /* @__PURE__ */ jsxs21(Box21, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsx29(Text23, { color: "red", children: "Failed to load transactions" }),
-      /* @__PURE__ */ jsx29(Text23, { color: "red", children: error })
+    return /* @__PURE__ */ jsxs23(Box23, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx33(Text25, { color: "red", children: "Failed to load transactions" }),
+      /* @__PURE__ */ jsx33(Text25, { color: "red", children: error })
     ] });
   }
   if (transactions.length === 0) {
-    return /* @__PURE__ */ jsx29(Box21, { children: /* @__PURE__ */ jsx29(Text23, { dimColor: true, children: "No transactions found" }) });
-  }
-  return /* @__PURE__ */ jsxs21(Box21, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsx29(Text23, { bold: true, children: "Transactions" }),
-    /* @__PURE__ */ jsxs21(Box21, { flexDirection: "column", marginTop: 1, paddingX: 2, children: [
-      /* @__PURE__ */ jsx29(Text23, { bold: true, children: headerRow }),
-      /* @__PURE__ */ jsx29(Text23, { dimColor: true, children: separatorRow }),
-      rows.map((row, index) => /* @__PURE__ */ jsx29(Text23, { children: row }, transactions[index].id))
+    return /* @__PURE__ */ jsx33(Box23, { children: /* @__PURE__ */ jsx33(Text25, { dimColor: true, children: "No transactions found" }) });
+  }
+  return /* @__PURE__ */ jsxs23(Box23, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx33(Text25, { bold: true, children: "Transactions" }),
+    /* @__PURE__ */ jsxs23(Box23, { flexDirection: "column", marginTop: 1, paddingX: 2, children: [
+      /* @__PURE__ */ jsx33(Text25, { bold: true, children: headerRow }),
+      /* @__PURE__ */ jsx33(Text25, { dimColor: true, children: separatorRow }),
+      rows.map((row, index) => /* @__PURE__ */ jsx33(Text25, { children: row }, transactions[index].id))
     ] }),
-    page?.has_more !== void 0 ? /* @__PURE__ */ jsxs21(Box21, { flexDirection: "column", marginTop: 1, children: [
-      /* @__PURE__ */ jsxs21(Text23, { dimColor: true, children: [
+    page?.has_more !== void 0 ? /* @__PURE__ */ jsxs23(Box23, { flexDirection: "column", marginTop: 1, children: [
+      /* @__PURE__ */ jsxs23(Text25, { dimColor: true, children: [
         "has_more: ",
         String(page.has_more)
       ] }),
-      nextCursor ? /* @__PURE__ */ jsx29(Text23, { dimColor: true, children: `next page: --starting-after ${nextCursor}` }) : null
+      nextCursor ? /* @__PURE__ */ jsx33(Text25, { dimColor: true, children: `next page: --starting-after ${nextCursor}` }) : null
     ] }) : null
   ] });
 };
 
 // src/commands/transactions/schema.ts
-import { z as z10 } from "incur";
+import { z as z12 } from "incur";
 var ISO_DATE_REGEX = /^\d{4}-\d{2}-\d{2}$/;
-var listOptions2 = z10.object({
-  limit: z10.coerce.number().int().positive().max(100).optional().describe("Maximum number of transactions to return (1-100)."),
-  startingAfter: z10.string().optional().describe("Cursor: return transactions after this transaction ID."),
-  endingBefore: z10.string().optional().describe("Cursor: return transactions before this transaction ID."),
-  startDate: z10.string().regex(ISO_DATE_REGEX, "Date must be in YYYY-MM-DD format.").optional().describe("Only include transactions on or after this YYYY-MM-DD date."),
-  endDate: z10.string().regex(ISO_DATE_REGEX, "Date must be in YYYY-MM-DD format.").optional().describe("Only include transactions on or before this YYYY-MM-DD date."),
-  category: z10.string().optional().describe("Filter by transaction category."),
-  origin: z10.enum(["link", "external_connection"]).optional().describe("Filter by transaction origin: link or external_connection."),
-  source: z10.array(z10.string()).default([]).describe("Filter by source ID. Repeat to include multiple sources.")
+var listOptions4 = z12.object({
+  limit: z12.coerce.number().int().positive().max(100).optional().describe("Maximum number of transactions to return (1-100)."),
+  startingAfter: z12.string().optional().describe("Cursor: return transactions after this transaction ID."),
+  endingBefore: z12.string().optional().describe("Cursor: return transactions before this transaction ID."),
+  startDate: z12.string().regex(ISO_DATE_REGEX, "Date must be in YYYY-MM-DD format.").optional().describe("Only include transactions on or after this YYYY-MM-DD date."),
+  endDate: z12.string().regex(ISO_DATE_REGEX, "Date must be in YYYY-MM-DD format.").optional().describe("Only include transactions on or before this YYYY-MM-DD date."),
+  category: z12.string().optional().describe("Filter by transaction category."),
+  origin: z12.enum(["link", "external_connection"]).optional().describe("Filter by transaction origin: link or external_connection."),
+  source: z12.array(z12.string()).default([]).describe("Filter by source ID. Repeat to include multiple sources.")
 });
 
 // src/commands/transactions/index.tsx
-import { jsx as jsx30 } from "react/jsx-runtime";
+import { jsx as jsx34 } from "react/jsx-runtime";
 function createTransactionsCli(createResource, authStorage2, envAccessToken2) {
-  const cli2 = Cli10.create("transactions", {
+  const cli2 = Cli12.create("transactions", {
     description: "List transactions from Link and external accounts"
   });
   cli2.command("list", {
     description: "List transactions from Link and external accounts, including non-Link activity",
-    options: listOptions2,
+    options: listOptions4,
     outputPolicy: "agent-only",
     middleware: [requireAuth(authStorage2, envAccessToken2)],
     async run(c) {
@@ -16564,7 +17450,7 @@ function createTransactionsCli(createResource, authStorage2, envAccessToken2) {
       if (opts.source.length > 0) params.sources = opts.source;
       if (!c.agent && !c.formatExplicit) {
         return renderInteractive(
-          /* @__PURE__ */ jsx30(
+          /* @__PURE__ */ jsx34(
             TransactionsList,
             {
               resource,
@@ -16583,54 +17469,54 @@ function createTransactionsCli(createResource, authStorage2, envAccessToken2) {
 }
 
 // src/commands/user-info/index.tsx
-import { Cli as Cli11 } from "incur";
+import { Cli as Cli13 } from "incur";
 
 // src/commands/user-info/retrieve.tsx
-import { Box as Box22, Text as Text24 } from "ink";
-import Spinner14 from "ink-spinner";
-import { useCallback as useCallback11 } from "react";
-import { jsx as jsx31, jsxs as jsxs22 } from "react/jsx-runtime";
+import { Box as Box24, Text as Text26 } from "ink";
+import Spinner16 from "ink-spinner";
+import { useCallback as useCallback13 } from "react";
+import { jsx as jsx35, jsxs as jsxs24 } from "react/jsx-runtime";
 var UserInfoRetrieve = ({
   resource,
   onComplete
 }) => {
-  const action = useCallback11(() => resource.retrieve(), [resource]);
+  const action = useCallback13(() => resource.retrieve(), [resource]);
   const { status, data: userInfo, error } = useAsyncAction(action, onComplete);
   if (status === "loading") {
-    return /* @__PURE__ */ jsx31(Box22, { children: /* @__PURE__ */ jsxs22(Text24, { color: "cyan", children: [
-      /* @__PURE__ */ jsx31(Spinner14, { type: "dots" }),
+    return /* @__PURE__ */ jsx35(Box24, { children: /* @__PURE__ */ jsxs24(Text26, { color: "cyan", children: [
+      /* @__PURE__ */ jsx35(Spinner16, { type: "dots" }),
       " Loading user info..."
     ] }) });
   }
   if (status === "error") {
-    return /* @__PURE__ */ jsxs22(Box22, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsx31(Text24, { color: "red", children: "\u2717 Failed to load user info" }),
-      /* @__PURE__ */ jsx31(Text24, { color: "red", children: error })
+    return /* @__PURE__ */ jsxs24(Box24, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx35(Text26, { color: "red", children: "\u2717 Failed to load user info" }),
+      /* @__PURE__ */ jsx35(Text26, { color: "red", children: error })
     ] });
   }
-  return /* @__PURE__ */ jsxs22(Box22, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsx31(Text24, { bold: true, children: "User Info" }),
-    /* @__PURE__ */ jsxs22(Box22, { flexDirection: "column", marginTop: 1, paddingX: 2, children: [
-      /* @__PURE__ */ jsxs22(Text24, { children: [
-        /* @__PURE__ */ jsx31(Text24, { dimColor: true, children: "Email: " }),
-        userInfo?.email ?? /* @__PURE__ */ jsx31(Text24, { dimColor: true, children: "Not set" })
+  return /* @__PURE__ */ jsxs24(Box24, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx35(Text26, { bold: true, children: "User Info" }),
+    /* @__PURE__ */ jsxs24(Box24, { flexDirection: "column", marginTop: 1, paddingX: 2, children: [
+      /* @__PURE__ */ jsxs24(Text26, { children: [
+        /* @__PURE__ */ jsx35(Text26, { dimColor: true, children: "Email: " }),
+        userInfo?.email ?? /* @__PURE__ */ jsx35(Text26, { dimColor: true, children: "Not set" })
       ] }),
-      /* @__PURE__ */ jsxs22(Text24, { children: [
-        /* @__PURE__ */ jsx31(Text24, { dimColor: true, children: "Name: " }),
-        userInfo?.name ?? /* @__PURE__ */ jsx31(Text24, { dimColor: true, children: "Not set" })
+      /* @__PURE__ */ jsxs24(Text26, { children: [
+        /* @__PURE__ */ jsx35(Text26, { dimColor: true, children: "Name: " }),
+        userInfo?.name ?? /* @__PURE__ */ jsx35(Text26, { dimColor: true, children: "Not set" })
       ] }),
-      /* @__PURE__ */ jsxs22(Text24, { children: [
-        /* @__PURE__ */ jsx31(Text24, { dimColor: true, children: "Phone: " }),
-        userInfo?.phone ?? /* @__PURE__ */ jsx31(Text24, { dimColor: true, children: "Not set" })
+      /* @__PURE__ */ jsxs24(Text26, { children: [
+        /* @__PURE__ */ jsx35(Text26, { dimColor: true, children: "Phone: " }),
+        userInfo?.phone ?? /* @__PURE__ */ jsx35(Text26, { dimColor: true, children: "Not set" })
       ] })
     ] })
   ] });
 };
 
 // src/commands/user-info/index.tsx
-import { jsx as jsx32 } from "react/jsx-runtime";
+import { jsx as jsx36 } from "react/jsx-runtime";
 function createUserInfoCli(createResource, authStorage2, envAccessToken2) {
-  const cli2 = Cli11.create("user-info", {
+  const cli2 = Cli13.create("user-info", {
     description: "User information commands"
   });
   cli2.command("retrieve", {
@@ -16641,7 +17527,7 @@ function createUserInfoCli(createResource, authStorage2, envAccessToken2) {
       const resource = createResource();
       if (!c.agent && !c.formatExplicit) {
         return renderInteractive(
-          /* @__PURE__ */ jsx32(UserInfoRetrieve, { resource, onComplete: () => {
+          /* @__PURE__ */ jsx36(UserInfoRetrieve, { resource, onComplete: () => {
           } }),
           () => resource.retrieve()
         );
@@ -16692,11 +17578,55 @@ function requireFetchImplementation2(config) {
 
 // src/auth/auth-resource.ts
 var CLIENT_ID = "lwlpk_U7Qy7ThG69STZk";
-var DEFAULT_SCOPE = "userinfo:read payment_methods.agentic";
 function formatOAuthError(prefix, status, data, rawBody) {
   const err = data;
   return `${prefix} (${status}): ${err?.error_description ?? err?.error ?? (rawBody || "unknown error")}`;
 }
+function appendAuthorizationDetailValue(params, key, value) {
+  if (Array.isArray(value)) {
+    for (const entry of value) {
+      appendAuthorizationDetailValue(params, `${key}[]`, entry);
+    }
+    return;
+  }
+  if (value !== null && typeof value === "object") {
+    for (const [entryKey, entryValue] of Object.entries(value)) {
+      appendAuthorizationDetailValue(params, `${key}[${entryKey}]`, entryValue);
+    }
+    return;
+  }
+  params.append(key, String(value));
+}
+function buildDeviceCodeForm(clientName, options) {
+  const connectionLabel = `${clientName} on ${hostname()}`;
+  const params = new URLSearchParams({
+    client_id: CLIENT_ID,
+    scope: options.scope ?? DEFAULT_SCOPE,
+    connection_label: connectionLabel,
+    client_hint: clientName
+  });
+  const authorizationDetails = buildAuthorizationDetails(
+    options.sourceActions,
+    options.authorizationDetails
+  );
+  for (const detail of authorizationDetails) {
+    appendAuthorizationDetailValue(params, "authorization_details[]", detail);
+  }
+  return params;
+}
+function serializeFormBody(params) {
+  return params instanceof URLSearchParams ? params.toString() : new URLSearchParams(params).toString();
+}
+function serializeRedactedFormBody(params) {
+  const redacted = new URLSearchParams(params);
+  if (redacted.has("device_code")) {
+    redacted.set("device_code", "<redacted>");
+  }
+  if (redacted.has("refresh_token")) {
+    redacted.set("refresh_token", "<redacted>");
+  }
+  return redacted.toString();
+}
 var LinkAuthResource = class {
   config;
   fetchImpl;
@@ -16706,12 +17636,9 @@ var LinkAuthResource = class {
   }
   async postForm(url, params) {
     if (this.config.verbose) {
-      const redacted = { ...params };
-      if (redacted.device_code) redacted.device_code = "<redacted>";
-      if (redacted.refresh_token) redacted.refresh_token = "<redacted>";
       this.config.logger.debug(
         `> POST ${url}
-${JSON.stringify(redacted, null, 2)}`
+${serializeRedactedFormBody(params)}`
       );
     }
     let response;
@@ -16722,7 +17649,7 @@ ${JSON.stringify(redacted, null, 2)}`
           ...this.config.defaultHeaders,
           "Content-Type": "application/x-www-form-urlencoded"
         },
-        body: new URLSearchParams(params).toString()
+        body: serializeFormBody(params)
       });
     } catch (error) {
       throw new LinkTransportError(`Request failed: POST ${url}`, {
@@ -16744,16 +17671,12 @@ ${JSON.stringify(redacted, null, 2)}`
     }
     return { status: response.status, data, rawBody };
   }
-  async initiateDeviceAuth(clientName) {
-    const effectiveName = clientName ?? this.config.clientName;
+  async initiateDeviceAuth(options = {}) {
+    const effectiveName = options.clientName ?? this.config.clientName;
+    const params = buildDeviceCodeForm(effectiveName, options);
     const { status, data, rawBody } = await this.postForm(
       `${this.config.authBaseUrl}/device/code`,
-      {
-        client_id: CLIENT_ID,
-        scope: DEFAULT_SCOPE,
-        connection_label: `${effectiveName} on ${hostname()}`,
-        client_hint: effectiveName
-      }
+      params
     );
     if (status < 200 || status >= 300) {
       throw new LinkApiError(
@@ -16933,6 +17856,8 @@ var ResourceFactory = class {
   shippingAddressResource;
   userInfoResource;
   transactionsResource;
+  sourcesResource;
+  balancesResource;
   webBotAuthResource;
   reportResource;
   constructor(options = {}) {
@@ -17061,6 +17986,34 @@ var ResourceFactory = class {
     );
     return this.transactionsResource;
   }
+  createSourcesResource() {
+    if (this.sourcesResource) {
+      return this.sourcesResource;
+    }
+    const getAccessToken = this.createSdkAccessTokenProvider();
+    this.sourcesResource = sanitizeResource(
+      new SourcesResource({
+        verbose: this.verbose,
+        defaultHeaders: this.defaultHeaders,
+        getAccessToken
+      })
+    );
+    return this.sourcesResource;
+  }
+  createBalancesResource() {
+    if (this.balancesResource) {
+      return this.balancesResource;
+    }
+    const getAccessToken = this.createSdkAccessTokenProvider();
+    this.balancesResource = sanitizeResource(
+      new BalancesResource({
+        verbose: this.verbose,
+        defaultHeaders: this.defaultHeaders,
+        getAccessToken
+      })
+    );
+    return this.balancesResource;
+  }
   createWebBotAuthResource() {
     if (this.webBotAuthResource) {
       return this.webBotAuthResource;
@@ -17162,7 +18115,7 @@ function cacheUpdateInfo(value, ttlMs = UPDATE_CACHE_TTL_MS) {
 }
 
 // src/cli.tsx
-var cliVersion = "0.8.3";
+var cliVersion = "0.10.0";
 var cliName = "@stripe/link-cli";
 var defaultHeaders = {
   "User-Agent": `link-cli/${cliVersion}`
@@ -17192,15 +18145,23 @@ var factory = new ResourceFactory({
 var authRepo = factory.createAuthResource();
 var spendRequestRepo = factory.createSpendRequestResource();
 var requestedCommand = process.argv[2];
-var transactionsCli = requestedCommand === "transactions" ? createTransactionsCli(
+var hiddenCli = requestedCommand === "transactions" ? createTransactionsCli(
   () => factory.createTransactionsResource(),
   authStorage,
   envAccessToken
+) : requestedCommand === "sources" ? createSourcesCli(
+  () => factory.createSourcesResource(),
+  authStorage,
+  envAccessToken
+) : requestedCommand === "balances" ? createBalancesCli(
+  () => factory.createBalancesResource(),
+  authStorage,
+  envAccessToken
 ) : null;
-if (transactionsCli) {
+if (hiddenCli) {
   process.argv.splice(2, 1);
 }
-var cli = transactionsCli ?? Cli12.create("link-cli", {
+var cli = hiddenCli ?? Cli14.create("link-cli", {
   description: "Create a secure, one-time payment credential from a Link wallet to let agents complete purchases on behalf of users.",
   version: cliVersion
 });
@@ -17217,7 +18178,7 @@ if (!isAgent && process.stdout.isTTY) {
     process.stderr.write(renderInteractiveUpdateNotice(updateInfo));
   }
 }
-if (!transactionsCli) {
+if (!hiddenCli) {
   cli.command(
     createAuthCli(authRepo, getUpdateInfo, authStorage, envAccessToken)
   );
@@ -17245,7 +18206,14 @@ if (!transactionsCli) {
       envAccessToken
     )
   );
-  cli.command(createMppCli(spendRequestRepo, authStorage, envAccessToken));
+  cli.command(
+    createMppCli(
+      spendRequestRepo,
+      () => factory.createPaymentMethodsResource(),
+      authStorage,
+      envAccessToken
+    )
+  );
   cli.command(
     createReportCli(
       () => factory.createReportResource(),