@vapi-network/cli 0.3.0 → 0.7.0

package/README.md

@@ -10,5 +10,14 @@ Two entry points: `@vapi-network/cli` exports `runCli` and the `HELP` text for
 embedding, and `@vapi-network/cli/cli` is the executable itself.
 
 Most users should install or run the unscoped `vapi-network` package instead.
-See the [root README](https://github.com/vAPI-Network/vapi-network#readme) for
-the full command reference.
+
+## Exports
+
+| Name              | What it is                                                                                                                                                                                                                                                           | Since            |
+| ----------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------- |
+| `CliDependencies` | type CliDependencies = { fetchImpl?: typeof fetch; prompts?: CliPrompts; interactive?: boolean; env?: NodeJS.ProcessEnv; secretStore?: SecretStore; now?: () => Date; agentLink?: { startDeviceLink?: typeof startDeviceLink; pollDeviceLink?: typeof pollDeviceL... | 0.5.0 or earlier |
+| `CliIo`           | type CliIo = { stdout(message: string): void; stderr(message: string): void; }                                                                                                                                                                                       | 0.5.0 or earlier |
+| `HELP`            | constant HELP: "vAPI Network\n\nUsage:\n vapi init [--networks <base,arc,solana>] [--json]\n vapi wallet list [--json]\n vapi wallet create <name> [--networks <base,arc,solana>] [--label <text>] [--json]\n vapi wallet use <name> [--json]\n vapi wallet renam... | 0.5.0 or earlier |
+| `runCli`          | function (argv = process.argv.slice(2), io: CliIo = processIo, dependencies: CliDependencies = {}): Promise<number>                                                                                                                                                  | 0.5.0 or earlier |
+
+See the [root README](https://github.com/vAPI-Network/vapi-network/blob/main/README.md#cli-reference) for the full command reference.

package/dist/accounts.d.ts

@@ -0,0 +1,11 @@
+import { type CliDependencies, type CliIo } from "./cli.js";
+export declare function accountsCommand(argv: string[], json: boolean, io: CliIo, dependencies: CliDependencies): Promise<number>;
+export declare function accountsListCommand(argv: string[], json: boolean, io: CliIo, dependencies: CliDependencies): Promise<void>;
+export declare function accountsAddCommand(argv: string[], json: boolean, io: CliIo, dependencies: CliDependencies): Promise<void>;
+export declare function accountsImportCommand(argv: string[], json: boolean, io: CliIo, dependencies: CliDependencies): Promise<void>;
+export declare function accountsRenameCommand(argv: string[], json: boolean, io: CliIo, dependencies: CliDependencies): Promise<void>;
+export declare function accountsUseCommand(argv: string[], json: boolean, io: CliIo, dependencies: CliDependencies): Promise<void>;
+export declare function accountsRemoveCommand(argv: string[], json: boolean, io: CliIo, dependencies: CliDependencies): Promise<void>;
+export declare function accountsRestoreCommand(argv: string[], json: boolean, io: CliIo, dependencies: CliDependencies): Promise<void>;
+export declare function accountsCapsCommand(argv: string[], json: boolean, io: CliIo, dependencies: CliDependencies): Promise<void>;
+export declare function accountsDistributeCommand(argv: string[], json: boolean, io: CliIo, dependencies: CliDependencies): Promise<number>;

package/dist/agent.d.ts

@@ -0,0 +1,14 @@
+import { listAgentProfiles, readAgentProfile, readSpendLedgerRows, removeAgentProfile, writeAgentProfile } from "@vapi-network/core";
+import { createAgentRunDeps, getWallet, runAgent } from "@vapi-network/mcp";
+import { type CliDependencies, type CliIo } from "./cli.js";
+export type AgentCommandDependencies = {
+    readAgentProfile?: typeof readAgentProfile;
+    writeAgentProfile?: typeof writeAgentProfile;
+    listAgentProfiles?: typeof listAgentProfiles;
+    removeAgentProfile?: typeof removeAgentProfile;
+    readSpendLedgerRows?: typeof readSpendLedgerRows;
+    createAgentRunDeps?: typeof createAgentRunDeps;
+    runAgent?: typeof runAgent;
+    getWallet?: typeof getWallet;
+};
+export declare function agentCommand(argv: string[], json: boolean, io: CliIo, dependencies: CliDependencies): Promise<number>;

package/dist/check.d.ts

@@ -0,0 +1,46 @@
+/**
+ * `vapi check <url>`: a free, local x402 conformance doctor. It asks the URL
+ * for its price the way a client would, without paying, and grades the 402
+ * rule by rule, including its advertised extensions; then it looks for the
+ * origin's discovery document and an OpenAPI description beside the checked
+ * path, at the origin root, or through the origin's API catalog. No wallet is
+ * opened, nothing is signed, and no registry is called: every request goes to
+ * the origin being checked.
+ *
+ * Offer issue codes use the registry's snake_case `probe.conformance`
+ * vocabulary, so `vapi check` and `vapi inspect` speak one language. The local
+ * extensions finding does not change that registry-shaped record.
+ */
+import { type ListingConformance } from "@vapi-network/core";
+export type CheckResult = "pass" | "warn" | "fail";
+export type CheckRule = {
+    rule: string;
+    result: CheckResult;
+    detail: string;
+    issues: string[];
+};
+export type CheckReport = {
+    url: string;
+    method: string;
+    status: number;
+    /** Which payment protocol the 402 speaks; absent when the response is not a 402 or carries neither. */
+    transport?: "x402" | "mpp";
+    /** The same record the registry keeps per listing; null when there is no offer to grade. */
+    conformance: ListingConformance | null;
+    /** Known x402 extensions advertised by the declared offer, in a stable order. */
+    extensions: string[];
+    rules: CheckRule[];
+    summary: Record<CheckResult, number>;
+};
+export type MppChallenge = {
+    intent?: string;
+    method?: string;
+};
+export declare function checkX402(target: URL, options: {
+    method: string;
+    fetchImpl: typeof fetch;
+}): Promise<CheckReport>;
+/** One line per rule, then the tally. */
+export declare function formatCheckReport(report: CheckReport): string;
+/** Finds the MPP scheme and keeps only the challenge fields used in check output. */
+export declare function parseMppChallenge(headerValue: string | null): MppChallenge | undefined;

package/dist/cli.d.ts

@@ -1,5 +1,8 @@
-import { type SecretStore } from "@vapi-network/core";
-export declare const HELP = "vAPI Network\n\nUsage:\n  vapi init [--networks <base,solana>] [--json]\n  vapi wallet list [--json]\n  vapi wallet create <name> [--networks <base,solana>] [--label <text>] [--json]\n  vapi wallet use <name> [--json]\n  vapi wallet rename <old> <new> [--json]\n  vapi wallet remove <name> [--force] [--json]\n  vapi wallet restore <name> [--json]\n  vapi wallet caps <name> [--per-call <usd>] [--per-day <usd>] [--json]\n  vapi fund [--amount <usd>] [--wallet <name>] [--json]\n  vapi accounts [--enable solana] [--wallet <name>] [--json]\n  vapi search [query] [--kind <kind>] [--network <caip2>] [--limit <n>] [--cursor <cursor>] [--json]\n  vapi inspect <id> [--endpoint <name>] [--json]\n  vapi pay <id-or-url> [--method <method>] [--endpoint <name>] [--body <json>] [--content-type <type>] [--network <caip2>] [--expected-pay-to <address>] [--max <amount>] [--wallet <name>] [--json]\n  vapi balance [--wallet <name>] [--json]\n  vapi receipts [--limit <n>] [--wallet <name>] [--all-wallets] [--json]\n  vapi receipts export --format <json|csv> [--range <24h|7d|30d>] [--wallet <name>] [--all-wallets]\n  vapi stats [--range <24h|7d|30d>] [--wallet <name>] [--all-wallets] [--json]\n  vapi sweep <address> [--network <caip2>] [--wallet <name>] [--json]\n  vapi export-key [--network <caip2>] [--wallet <name>] [--json]\n  vapi backup [--wallet <name>] [--json]\n  vapi import (--phrase | --key) [--wallet <name>] [--networks <base,solana>] [--replace] [--force] [--json]\n  vapi passphrase [--wallet <name>] [--json]\n  vapi unlock [--wallet <name>] [--json]\n  vapi lock [--wallet <name> | --all] [--json]\n  vapi report \"<what happened>\" [--include-addresses] [--send] [--json]\n  vapi mcp [--wallet <name>] [--json]\n  vapi serve [--json]\n  vapi version [--json]\n  vapi publish [--json]\n  vapi help [--json]\n\nEvery command that touches a wallet takes `--wallet <name>`, falls back to `VAPI_WALLET`, then to the default set by `vapi wallet use`, and names the wallet it used on its first line.\n\n`vapi fund` opens the funding page: card via Coinbase (needs a Coinbase account; US guest checkout), send from MetaMask/Coinbase Wallet/WalletConnect, or bridge from another chain.\n\n`vapi unlock` keeps one wallet's passphrase in the OS secret store \u2014 the macOS Keychain, or libsecret on Linux \u2014 so an agent can pay without `VAPI_KEYSTORE_PASSWORD` in its configuration. `vapi lock` takes it out again. Unlock order: `VAPI_KEYSTORE_PASSWORD`, then the secret store, then a prompt on a terminal. Windows still needs the variable.\n\n`vapi backup` and `vapi export-key` print a secret, so they run only on a real terminal, never for an agent, and ask you to type the wallet name first. Set `VAPI_NO_SECRETS=1` to switch them off entirely. Every export and every wallet change is logged to ~/.vapi/audit.log.\n\nWith no command, vapi shows this help. The MCP server starts only with `vapi mcp`.";
+import { drainCeilingSweeps, sweepBack, WalletStore, type AuditEvent, type CeilingBalanceReader, type CeilingSiblingsFetcher, type CeilingTransfer, type DistributeArgs, type ListingVerification, type SecretStore, type VapiConfig, type VapiPaymentAccount, type WalletBalanceReader, type WalletEntry, type WalletName, type TransferArgs } from "@vapi-network/core";
+import { type pollDeviceLink, type startDeviceLink } from "@vapi-network/core/agent-link";
+import type { buyRouterBalance, listRouterModels, ownerStake, rotateRouterKey, routerChat, routerCredentials, routerUsage } from "@vapi-network/core/router-client";
+import { type AgentCommandDependencies } from "./agent.js";
+export declare const HELP = "vAPI Network\n\nUsage:\n  vapi init [--networks <base,arc,solana>] [--json]\n  vapi setup [--no-cloud-backup] [--json]\n  vapi accounts [--all] [--json]\n  vapi accounts add <name> [--label <text>] [--no-link] [--json]\n  vapi accounts import <name> [--keystore <path> | --key-file <path>] [--label <text>] [--json]\n  vapi accounts rename <old> <new> [--json]\n  vapi accounts use <name> [--json]\n  vapi accounts remove <name> [--force] [--json]\n  vapi accounts restore <name> [--json]\n  vapi accounts caps <name> [--per-call <usd>] [--per-day <usd>] [--ceiling <usd|off>] [--json]\n  vapi accounts distribute <amount> --from <account> [--to <a,b,c>] [--network base|arc] [--json]\n  vapi accounts distribute --resume <id> [--json]\n  vapi send <amount> --from <account> --to <account|owner|0x\u2026> [--network base|arc] [--resume <nonce>] [--json]\n  vapi fund [--amount <usd>] [--account <name>] [--json]\n  vapi search [query] [--kind <kind>] [--network <caip2>] [--limit <n>] [--cursor <cursor>] [--include-unverified] [--json]\n  vapi inspect <id> [--endpoint <name>] [--json]\n  vapi pay <id-or-url> [--method <method>] [--endpoint <name>] [--body <json>] [--content-type <type>] [--network <caip2>] [--expected-pay-to <address>] [--max <amount>] [--account <name>] [--json]\n  vapi pay --resume <receipt-id> [--json]\n  vapi check <url> [--method <method>] [--json]\n  vapi balance [--account <name>] [--json]\n  vapi receipts [--limit <n>] [--account <name>] [--all-wallets] [--json]\n  vapi receipts export --format <json|csv> [--range <24h|7d|30d>] [--account <name>] [--all-wallets]\n  vapi stats [--range <24h|7d|30d>] [--account <name>] [--all-wallets] [--json]\n  vapi sweep [<address>] [--network <caip2>] [--account <name>] [--json]\n  vapi agent create <name> --model <id> --instructions <file> [--call-budget <usd>] [--max-per-call <usd>] [--router-budget <usd>] [--approve-above <usd>] [--include-unverified] [--max-steps <n>] [--json]\n  vapi agent run <name> \"<task>\" [--json]\n  vapi agent list [--json]\n  vapi agent pause <name> [--json]\n  vapi agent resume <name> [--json]\n  vapi agent revoke <name> [--json]\n  vapi login [--account <name>] [--label <name>] [--publish] [--no-browser] [--json]\n  vapi logout [--account <name>] [--json]\n  vapi whoami [--account <name>] [--json]\n  vapi router models [--account <name>] [--json]\n  vapi router usage [--account <name>] [--json]\n  vapi router chat --model <id> [--system <text>] [--max-tokens <n>] \"<prompt>\" [--account <name>] [--json]\n  vapi router buy <1|5|20|50> [--account <name>] [--json]\n  vapi router buy --auto <1|5|20|50> --below <usd> [--account <name>] [--json]\n  vapi router buy --auto off [--account <name>] [--json]\n  vapi router key [--rotate] [--account <name>] [--json]\n  vapi stake status [--account <name>] [--json]\n  vapi stake open [--account <name>] [--no-browser] [--json]\n  vapi export-key [--network <caip2>] [--account <name>] [--json]\n  vapi backup [--account <name>] [--cloud [off]] [--json]\n  vapi restore [--from-owner [--owner <0x\u2026>]] [--json]\n  vapi import (--phrase | --key) [--account <name>] [--networks <base,arc,solana>] [--replace] [--force] [--json]\n  vapi passphrase [--account <name>] [--json]\n  vapi vault protect [--json]\n  vapi vault unprotect [--json]\n  vapi vault lock [--json]\n  vapi vault unlock [--json]\n  vapi vault status [--json]\n  vapi unlock [--account <name>] [--json]\n  vapi lock [--account <name> | --all] [--json]\n  vapi report \"<what happened>\" [--include-addresses] [--send] [--json]\n  vapi auth set-key [--json]\n  vapi auth status [--json]\n  vapi auth clear [--json]\n  vapi publish <url> [--method <method>] [--mode <origin|endpoint|openapi>] [--name <text>] [--description <text>] [--category <ai|data|crypto|compute|search>] [--select <names>] [--account <name>] [--yes] [--resume] [--json]\n  vapi publish activate <slug> [--json]\n  vapi publish verify-request <slug> [--json]\n  vapi publish list [--json]\n  vapi claim <origin> [--account <name>] [--json]\n  vapi mcp [--account <name>] [--json]\n  vapi mcp install <claude|cursor|codex> [--home <dir>] [--registry <url>] [--json]\n  vapi serve [--json]\n  vapi version [--json]\n  vapi help [--json]\n\nEvery command that touches a wallet takes `--account <name>`, falls back to `VAPI_WALLET`, then to the default account set by `vapi accounts use`, and names the wallet it used on its first line.\n\n`vapi search` answers with vAPI-verified listings plus the mirrored external catalogs. `--include-unverified` also returns self-listed APIs that passed vAPI's automated x402 probe but were never reviewed; every result is tagged `[verified]`, `[requested]`, `[unverified]` or `[external]`.\n\n`vapi check <url>` grades an x402 API's 402 without paying: status, transport, declared version and its required fields, the exact scheme, canonical USDC, payTo, maxTimeoutSeconds, advertised extensions, and the origin's /.well-known/x402. It looks for OpenAPI beside the checked path, at /openapi.json, then through same-origin service-desc links in /.well-known/api-catalog. No wallet, no payment, no registry call. It exits 1 when a rule fails. A 402 that answers with Stripe/Tempo's MPP challenge (WWW-Authenticate: Payment) is recognised and reported as transport mpp; vapi pay cannot pay it.\n\n`vapi pay --resume <receipt-id>` answers the one question a lost response leaves: did that payment settle? It reads the signed authorization's state on-chain \u2014 settled, expired, or still pending \u2014 and never pays.\n\n`vapi fund` opens the funding page: card via Coinbase (needs a Coinbase account; US guest checkout), send from MetaMask/Coinbase Wallet/WalletConnect, or bridge from another chain.\n\n`vapi vault protect` adds a password to the device vault. `vapi vault unlock` opens it on this device for 8 hours; for unattended use, set `VAPI_VAULT_PASSWORD`. `vapi unlock` and `vapi lock` remain aliases for one release.\n\n`vapi backup` and `vapi export-key` print a secret, so they run only on a real terminal, never for an agent, and ask you to type the wallet name first. `vapi backup --cloud` keeps an encrypted vault copy that only the owner can approve for recovery. `vapi restore` rebuilds the vault from the phrase and re-derives accounts until an unused address. Set `VAPI_NO_SECRETS=1` to switch exports off entirely. Every export and every wallet change is logged to ~/.vapi/audit.log.\n\n`vapi publish <url>` lists an API you own. vAPI probes the URL \u2014 an origin, one endpoint, or an OpenAPI document \u2014 you choose which endpoints to list, and your wallet signs one line naming where the payouts go. Listing is permissionless: a listing that passed the probe goes live with `vapi publish activate <slug>`, and `vapi publish verify-request <slug>` asks for the review that puts it in the default search. Deploying the FeeSplitter that receives the payouts is a wallet transaction and stays in the console. A catalog of more than 20 endpoints is listed as several listings of up to 20, with one result line per endpoint; `--resume` skips every endpoint this key already lists.\n\n`vapi claim <origin>` takes ownership of the listings vAPI indexed from your API. The wallet their payments go to signs one line, `Claim the vAPI Call listings served from <origin>`; the listings stay paid directly to that wallet, and `vapi publish list` shows them.\n\n`vapi auth set-key` types the registry API key once, on a terminal, into the same OS secret store as the passphrase. A key is a secret: it is never an argument, `VAPI_API_KEY` is the route for CI, and no agent or MCP tool can reach it.\n\nWith no command, vapi shows the status screen; vapi help prints this text. The MCP server starts only with `vapi mcp`; `vapi mcp install <app>` writes that app's MCP config and prints the file it touched.";
 export type CliIo = {
     stdout(message: string): void;
     stderr(message: string): void;
@@ -19,10 +22,198 @@ export type CliDependencies = {
     prompts?: CliPrompts;
     /** Whether a person is watching. Only then is a recovery phrase shown. */
     interactive?: boolean;
+    /** Whether stdin is a terminal, independently of redirected stdout. */
+    stdinIsTTY?: boolean;
     /** The environment this run sees: wallet selection and agent detection. */
     env?: NodeJS.ProcessEnv;
     /** The OS secret store `vapi unlock` and `vapi lock` act on. */
     secretStore?: SecretStore;
+    /** Injected clock, so a signed message is reproducible in a test. */
+    now?: () => Date;
+    /** Injected hostname, so device naming is reproducible in a test. */
+    hostname?: () => string;
+    /** Device-link operations, injected so tests never touch the account service. */
+    agentLink?: {
+        startDeviceLink?: typeof startDeviceLink;
+        pollDeviceLink?: typeof pollDeviceLink;
+        forgetAgentLink?: typeof import("@vapi-network/core/agent-link").forgetAgentLink;
+    };
+    /** Router operations, injected so CLI tests never make service requests. */
+    router?: {
+        listRouterModels?: typeof listRouterModels;
+        routerUsage?: typeof routerUsage;
+        routerChat?: typeof routerChat;
+        buyRouterBalance?: typeof buyRouterBalance;
+        rotateRouterKey?: typeof rotateRouterKey;
+        ownerStake?: typeof ownerStake;
+        routerCredentials?: typeof routerCredentials;
+    };
+    /** Status-screen deadlines, injected so timeout behavior is deterministic in tests. */
+    status?: {
+        timeoutMs?: number;
+    };
+    /** Cloud-backup seams, injected so relay and upload tests stay deterministic. */
+    cloudBackup?: {
+        startRelay?: typeof import("@vapi-network/core/cloud-backup").startRelay;
+        awaitRelay?: typeof import("@vapi-network/core/cloud-backup").awaitRelay;
+        uploadBackup?: typeof import("@vapi-network/core/cloud-backup").uploadBackup;
+        fetchSiblings?: typeof import("@vapi-network/core").fetchSiblings;
+        sleep?: (milliseconds: number, signal?: AbortSignal) => Promise<void>;
+        randomBytes?: (size: number) => Uint8Array;
+        uploadTimeoutMs?: number;
+    };
+    /** MCP client locations, injected so installer tests never touch user config. */
+    mcpInstall?: {
+        platform?: NodeJS.Platform;
+        homedir?: string;
+        cwd?: string;
+        appData?: string;
+    };
+    /** Agent profile and run operations, injected so tests stay local and deterministic. */
+    agent?: AgentCommandDependencies;
+    /** Reads stdin to EOF for `vapi router chat ... -` and scripted vault restores. */
+    readStdin?: () => Promise<string>;
+    /** Opens one public URL in the platform browser. */
+    openUrl?: (url: string) => boolean;
+    /** Moves a wallet balance, injected for deterministic sweep command tests. */
+    sweepBack?: typeof sweepBack;
+    /** Transfer authorization inputs, injected so send tests are deterministic. */
+    transfer?: {
+        nonce?: TransferArgs["nonce"];
+        timeoutMs?: number;
+    };
+    /** Distribution seams, injected so CLI tests never sign or relay live transfers. */
+    distribute?: Pick<DistributeArgs, "balanceReader" | "siblingsReader" | "transfer" | "authorizationState" | "randomId" | "randomNonce" | "timeoutMs" | "lockTimeoutMs">;
+    /** Automatic ceiling sweep seams for status and short-lived paid calls. */
+    ceiling?: {
+        sweepAllAboveCeiling?: typeof import("@vapi-network/core").sweepAllAboveCeiling;
+        drainCeilingSweeps?: typeof drainCeilingSweeps;
+        balanceReader?: CeilingBalanceReader;
+        fetchSiblingsImpl?: CeilingSiblingsFetcher;
+        transfer?: CeilingTransfer;
+        timeoutMs?: number;
+    };
 };
+export declare class UsageError extends Error {
+}
+export declare function getPrompts(dependencies: CliDependencies): CliPrompts;
+export declare function getEnvironment(dependencies: CliDependencies): NodeJS.ProcessEnv;
+/** A recovery phrase is shown only when a person can write it down. */
+export declare function isInteractive(dependencies: CliDependencies): boolean;
+/** Whether a secret can be typed without being echoed, even when stdout is redirected. */
+export declare function isStdinInteractive(dependencies: CliDependencies): boolean;
+/**
+ * Reads one visible line. The prompt and the echo go to stderr, so a typed
+ * confirmation never lands in the stdout a caller may be capturing.
+ */
+export declare function promptForLine(prompt: string): Promise<string>;
+export declare function getLinePrompt(dependencies: CliDependencies): (prompt: string) => Promise<string>;
+/** The wallet one invocation acts on, resolved before any passphrase is read. */
+export type WalletTarget = {
+    store: WalletStore;
+    name: WalletName;
+    path: string;
+    entry: WalletEntry;
+    address?: string;
+};
+/** Opens the wallet store for this home, migrating a 0.2.x layout on the way. */
+export declare function openWalletStore(dependencies: CliDependencies): Promise<WalletStore>;
+/** Opens the store and picks the wallet in one step, for the usual command. */
+export declare function targetWallet(parsed: {
+    one(name: string): string | undefined;
+}, dependencies: CliDependencies): Promise<WalletTarget>;
+/** The OS secret store this run uses: the machine's, or the one a test injects. */
+export declare function getSecretStore(dependencies: CliDependencies): SecretStore;
+/** Opens the selected wallet, and keeps the passphrase for callers that need it. */
+export declare function unlockTarget(target: WalletTarget, dependencies: CliDependencies): Promise<{
+    account: VapiPaymentAccount;
+    passphrase: string;
+}>;
+/** One audit line. The home is the wallet store's, so `VAPI_HOME` is honoured. */
+export declare function recordAudit(dependencies: CliDependencies, event: AuditEvent | "vault.cloud_backup_on" | "vault.cloud_backup_off", options?: {
+    wallet?: string;
+    detail?: string;
+}): Promise<void>;
+/**
+ * The gate in front of `vapi backup` and `vapi export-key`: refuse, log the
+ * attempt, and say which stream or which variable decided it. Nothing is
+ * printed to stdout, so a caller capturing it gets nothing either way.
+ */
+export declare function requireSecretsAllowed(dependencies: CliDependencies, event: AuditEvent, wallet: string | undefined, options?: {
+    refusal?: string;
+    forcedReason?: string;
+}): Promise<void>;
+/**
+ * Printing a secret or trashing a wallet is worth one deliberate act: the
+ * person types the wallet's own name. A mismatch stops before anything moves.
+ */
+export declare function confirmWalletName(name: string, prompt: string, refusal: string, dependencies: CliDependencies): Promise<void>;
 /** Run one CLI invocation and return its process exit code. */
 export declare function runCli(argv?: string[], io?: CliIo, dependencies?: CliDependencies): Promise<number>;
+/**
+ * Creates another wallet on this machine, with the same custody notice and
+ * the same one-time phrase as `vapi init`.
+ * No network call: a fresh wallet has nothing to look up.
+ */
+export declare function walletCreateCommand(argv: string[], json: boolean, io: CliIo, dependencies: CliDependencies): Promise<void>;
+/** Compatibility export for the agent command while account management moves modules. */
+export declare function walletCapsCommand(argv: string[], json: boolean, io: CliIo, dependencies: CliDependencies): Promise<void>;
+/**
+ * The Base USDC balance of an address, read the way `vapi accounts` reads it,
+ * so removing a wallet can refuse to walk away from money.
+ */
+export declare function baseUsdcBalanceReader(config: VapiConfig, dependencies: CliDependencies): WalletBalanceReader;
+/**
+ * The registry behind the configured discovery URLs. `VAPI_REGISTRY_URL` has
+ * already moved those by the time the config is loaded, so deriving the base
+ * from them follows the env override, a self-hosted registry and a mount
+ * prefix alike. A hand-edited discovery URL falls back to the shipped default.
+ */
+export declare function registryBaseUrl(config: VapiConfig): string;
+/** Loads the config and reports any retired registry URL it had to repair. */
+export declare function readConfig(path: string, io: CliIo): Promise<VapiConfig>;
+export declare function output(io: CliIo, json: boolean, value: unknown, human: string): void;
+/**
+ * The short word for how far a listing got through vAPI review. A mirrored
+ * external row is called `external` rather than `unverified`: vAPI reviewed
+ * nothing it merely mirrored, and saying "unverified" would read as a verdict
+ * on a catalog vAPI never claimed to judge.
+ */
+export declare function verificationTag(listing: {
+    verification?: ListingVerification;
+    external?: boolean;
+}): "verified" | "requested" | "unverified" | "external";
+/**
+ * One line, above the result, when the listing that was just paid is not
+ * vAPI-verified. It never blocks and never prompts: the payment has already
+ * happened, and the point is that the next one is an informed choice.
+ */
+export declare function verificationNotice(verification: ListingVerification | undefined): string[];
+/**
+ * Open a funding URL without ever failing the command: a headless or locked-down
+ * machine simply keeps the printed link.
+ */
+export declare function openInBrowser(url: string): boolean;
+export declare const CUSTODY_NOTICE: string;
+/**
+ * The phrase is shown once, to a person, and waits until they say they have it.
+ * A script, a piped run or anything an agent drives gets the pointer to
+ * `vapi backup` instead: the wallet is still created, but nothing here may end
+ * up in a transcript or a log file.
+ */
+export declare function showRecoveryPhrase(phrase: string, io: CliIo, dependencies: CliDependencies): Promise<void>;
+type ArgumentSpec = {
+    valueOptions: Set<string>;
+    booleanOptions?: Set<string>;
+    repeatableOptions?: Set<string>;
+    maximumPositionals: number;
+};
+export declare function parseArguments(argv: string[], spec: ArgumentSpec): {
+    positionals: string[];
+    one: (name: string) => string | undefined;
+    many: (name: string) => string[];
+    has: (name: string) => boolean;
+};
+export declare function requiredPositional(value: string | undefined, argument: string, usage: string): string;
+export declare function fileExists(path: string): Promise<boolean>;
+export {};