@visa/cli 1.11.0-rc.3 → 1.11.0-rc.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/dist/cli.js CHANGED
@@ -1,4 +1,4 @@
1
- "use strict";var Or=Object.create;var Zt=Object.defineProperty;var Dr=Object.getOwnPropertyDescriptor;var Ur=Object.getOwnPropertyNames;var jr=Object.getPrototypeOf,Mr=Object.prototype.hasOwnProperty;var Hr=(e,t)=>()=>(t||e((t={exports:{}}).exports,t),t.exports);var Vr=(e,t,n,r)=>{if(t&&typeof t=="object"||typeof t=="function")for(let s of Ur(t))!Mr.call(e,s)&&s!==n&&Zt(e,s,{get:()=>t[s],enumerable:!(r=Dr(t,s))||r.enumerable});return e};var h=(e,t,n)=>(n=e!=null?Or(jr(e)):{},Vr(t||!e||!e.__esModule?Zt(n,"default",{value:e,enumerable:!0}):n,e));var dt=Hr((To,es)=>{es.exports={name:"@visa/cli",version:"1.11.0-rc.3",description:"AI-powered payments for Claude Code",bin:{"visa-cli":"./bin/visa-cli.js"},scripts:{build:"tsc --noEmit && node esbuild.config.js",dev:"tsc --watch",pretest:"pnpm build",start:"node dist/mcp-server/index.js",test:"jest --config jest.config.js","test:unit":"jest --config jest.config.js","test:unit:watch":"jest --config jest.config.js --watch","test:unit:coverage":"jest --config jest.config.js --coverage","test:smoke":"VISA_AUTH_URL=https://auth.visacli.sh jest --config jest.smoke.config.js","test:integration":"jest --config jest.integration.config.js","test:e2e":"jest --config jest.e2e.config.js","test:catalog-e2e":"jest --config jest.catalog-e2e.config.js","test:all":"npm run test:unit && npm run test:integration && npm run test:e2e",prepublishOnly:"npm run build && npm test",lint:"eslint src/**/*.ts",format:'prettier --write "src/**/*.ts"',"format:check":'prettier --check "src/**/*.ts"'},keywords:["visa","checkout","mcp","ai-agent","payments","click-to-pay","usdc","stablecoin"],author:"Visa Crypto Labs",license:"SEE LICENSE IN LICENSE",dependencies:{"@modelcontextprotocol/sdk":"^1.0.0",commander:"^12.1.0",zod:"^3.23.0"},devDependencies:{"@visa-cli/tools":"workspace:*","@changesets/changelog-git":"^0.2.1","@changesets/cli":"^2.31.0","@types/jest":"^30.0.0","@types/node":"^25.6.0","@typescript-eslint/eslint-plugin":"^8.59.0","@typescript-eslint/parser":"^8.59.0","@types/express":"^5.0.0",esbuild:"^0.27.4",express:"^4.21.0",eslint:"^10.0.2","eslint-config-prettier":"^10.1.8",jest:"^29.7.0",prettier:"^3.8.3","ts-jest":"^29.2.0",typescript:"^5.7.0"},engines:{node:">=18.0.0"},mcpName:"io.github.visa-crypto-labs/visa-cli",files:["bin/visa-cli.js","dist/","install.ps1","native/visa-keychain.m","server.json","README.md","LICENSE"]}});var $r=require("commander"),rt=h(require("crypto")),Er=h(require("fs")),R=h(require("os")),se=h(require("path")),Pr=require("child_process"),Tr=require("util");var Ae=require("child_process"),Qt=require("util"),Q=h(require("fs")),Re=h(require("os")),ct=h(require("path"));var z="6820f6e91b762e645c9bf020c0d3673bb99d4a25a824880c0d548e10bb9bc7b1";var G=(0,Qt.promisify)(Ae.execFile),lt=ct.join(Re.homedir(),".visa-mcp"),ge=ct.join(lt,"session-token"),B="visa-cli",Z="session-token",Pe="rc-access",Fr=5e3,Te=class extends Error{constructor(t){super(t),this.name="CredentialAccessError"}};function Br(e){let t=e;return[t?.message,t?.stderr].filter(n=>typeof n=="string").join(`
1
+ "use strict";var Or=Object.create;var Zt=Object.defineProperty;var Dr=Object.getOwnPropertyDescriptor;var Ur=Object.getOwnPropertyNames;var jr=Object.getPrototypeOf,Mr=Object.prototype.hasOwnProperty;var Hr=(e,t)=>()=>(t||e((t={exports:{}}).exports,t),t.exports);var Vr=(e,t,n,r)=>{if(t&&typeof t=="object"||typeof t=="function")for(let s of Ur(t))!Mr.call(e,s)&&s!==n&&Zt(e,s,{get:()=>t[s],enumerable:!(r=Dr(t,s))||r.enumerable});return e};var h=(e,t,n)=>(n=e!=null?Or(jr(e)):{},Vr(t||!e||!e.__esModule?Zt(n,"default",{value:e,enumerable:!0}):n,e));var dt=Hr((To,es)=>{es.exports={name:"@visa/cli",version:"1.11.0-rc.4",description:"AI-powered payments for Claude Code",bin:{"visa-cli":"./bin/visa-cli.js"},scripts:{build:"tsc --noEmit && node esbuild.config.js",dev:"tsc --watch",pretest:"pnpm build",start:"node dist/mcp-server/index.js",test:"jest --config jest.config.js","test:unit":"jest --config jest.config.js","test:unit:watch":"jest --config jest.config.js --watch","test:unit:coverage":"jest --config jest.config.js --coverage","test:smoke":"VISA_AUTH_URL=https://auth.visacli.sh jest --config jest.smoke.config.js","test:integration":"jest --config jest.integration.config.js","test:e2e":"jest --config jest.e2e.config.js","test:catalog-e2e":"jest --config jest.catalog-e2e.config.js","test:all":"npm run test:unit && npm run test:integration && npm run test:e2e",prepublishOnly:"npm run build && npm test",lint:"eslint src/**/*.ts",format:'prettier --write "src/**/*.ts"',"format:check":'prettier --check "src/**/*.ts"'},keywords:["visa","checkout","mcp","ai-agent","payments","click-to-pay","usdc","stablecoin"],author:"Visa Crypto Labs",license:"SEE LICENSE IN LICENSE",dependencies:{"@modelcontextprotocol/sdk":"^1.0.0",commander:"^12.1.0",zod:"^3.23.0"},devDependencies:{"@visa-cli/tools":"workspace:*","@changesets/changelog-git":"^0.2.1","@changesets/cli":"^2.31.0","@types/jest":"^30.0.0","@types/node":"^25.6.0","@typescript-eslint/eslint-plugin":"^8.59.0","@typescript-eslint/parser":"^8.59.0","@types/express":"^5.0.0",esbuild:"^0.27.4",express:"^4.21.0",eslint:"^10.0.2","eslint-config-prettier":"^10.1.8",jest:"^29.7.0",prettier:"^3.8.3","ts-jest":"^29.2.0",typescript:"^5.7.0"},engines:{node:">=18.0.0"},mcpName:"io.github.visa-crypto-labs/visa-cli",files:["bin/visa-cli.js","dist/","install.ps1","native/visa-keychain.m","server.json","README.md","LICENSE"]}});var $r=require("commander"),rt=h(require("crypto")),Er=h(require("fs")),R=h(require("os")),se=h(require("path")),Pr=require("child_process"),Tr=require("util");var Ae=require("child_process"),Qt=require("util"),Q=h(require("fs")),Re=h(require("os")),ct=h(require("path"));var z="6820f6e91b762e645c9bf020c0d3673bb99d4a25a824880c0d548e10bb9bc7b1";var G=(0,Qt.promisify)(Ae.execFile),lt=ct.join(Re.homedir(),".visa-mcp"),ge=ct.join(lt,"session-token"),B="visa-cli",Z="session-token",Pe="rc-access",Fr=5e3,Te=class extends Error{constructor(t){super(t),this.name="CredentialAccessError"}};function Br(e){let t=e;return[t?.message,t?.stderr].filter(n=>typeof n=="string").join(`
2
2
  `)}function en(e){let t=e;if(t?.code==="EPERM"||t?.code==="EACCES")return!0;let n=Br(e).toLowerCase();return n.includes("operation not permitted")||n.includes("permission denied")}async function Kr(){try{let{stdout:e}=await G("security",["find-generic-password","-s",B,"-a",Z,"-w"],{timeout:5e3});return e.trim()||null}catch(e){if(en(e))throw new Te("Unable to read Visa CLI credentials from macOS Keychain. In sandboxed agents such as Codex, rerun with keychain access or run this command outside the sandbox.");return null}}async function qr(e){try{try{await G("security",["delete-generic-password","-s",B,"-a",Z],{timeout:5e3})}catch{}return await G("security",["add-generic-password","-s",B,"-a",Z,"-w",e],{timeout:5e3}),!0}catch{return!1}}async function Gr(){try{await G("security",["delete-generic-password","-s",B,"-a",Z],{timeout:5e3})}catch{}}async function Jr(){if(!ut())return null;try{let{stdout:e}=await G("secret-tool",["lookup","service",B,"account",Z],{timeout:5e3});return e.trim()||null}catch{return null}}async function Wr(e){if(!ut())return!1;try{let t=(0,Ae.execFile)("secret-tool",["store","--label",`${B} ${Z}`,"service",B,"account",Z]);return t.stdin?(t.stdin.write(e),t.stdin.end(),await Promise.race([new Promise((n,r)=>{t.on("exit",s=>s===0?n():r(new Error(`secret-tool exited ${s}`))),t.on("error",r)}),new Promise((n,r)=>setTimeout(()=>{t.kill(),r(new Error("secret-tool timed out"))},Fr))]),!0):!1}catch{return!1}}async function zr(){if(ut())try{await G("secret-tool",["clear","service",B,"account",Z],{timeout:5e3})}catch{}}function ut(){return!!process.env.DBUS_SESSION_BUS_ADDRESS}async function Yr(){try{let{stdout:e}=await G("security",["find-generic-password","-s",B,"-a",Pe,"-w"],{timeout:5e3});return e.trim()||null}catch{return null}}async function Xr(e){try{try{await G("security",["delete-generic-password","-s",B,"-a",Pe],{timeout:5e3})}catch{}await G("security",["add-generic-password","-s",B,"-a",Pe,"-w",e],{timeout:5e3})}catch{}}async function Zr(){try{await G("security",["delete-generic-password","-s",B,"-a",Pe],{timeout:5e3})}catch{}}function it(){try{return Q.readFileSync(ge,"utf-8").trim()||null}catch(e){if(en(e))throw new Te(`Unable to read Visa CLI credentials from ${ge}. Check file permissions or rerun with access to the Visa CLI credential directory.`);return null}}function tn(e){Q.mkdirSync(lt,{recursive:!0,mode:448}),Q.writeFileSync(ge,e,{mode:384}),process.platform==="win32"&&Qr(ge)}function at(){try{Q.unlinkSync(ge)}catch{}}function Qr(e){try{let t=Re.userInfo().username;(0,Ae.execFile)("icacls",[e,"/inheritance:r","/grant:r",`${t}:F`],{timeout:5e3},n=>{n&&console.error(`[visa-cli] icacls ACL restriction failed: ${n.message}`)})}catch(t){console.error(`[visa-cli] Failed to invoke icacls: ${t instanceof Error?t.message:String(t)}`)}}function ot(){switch(process.platform){case"darwin":return{get:Kr,store:qr,delete:Gr};case"linux":return{get:Jr,store:Wr,delete:zr};default:return{get:async()=>it(),store:async e=>{try{return tn(e),!0}catch{return!1}},delete:async()=>at(),storesInSessionFile:!0}}}var x=class{static async getSessionToken(){if(process.env.VISA_MOCK_KEYCHAIN==="true")return Promise.resolve("mock-session-token-for-testing");let t=ot(),n=await t.get();if(n)return n;let r=it();return r?(await t.store(r),r):null}static async saveSessionToken(t){if(process.env.VISA_MOCK_KEYCHAIN==="true")return;let n=ot();if(await n.store(t)){if(await n.get()===t){n.storesInSessionFile||at();return}await n.delete()}if(tn(t),it()!==t)throw new Error("Failed to persist session token. "+(process.platform==="darwin"?'Check Keychain Access permissions for "visa-cli".':`Ensure ${lt} is writable.`))}static async getRcAccessToken(){return process.env.VISA_MOCK_KEYCHAIN==="true"?z:Yr()}static async saveRcAccessToken(t){process.env.VISA_MOCK_KEYCHAIN!=="true"&&await Xr(t)}static async deleteSessionToken(){if(process.env.VISA_MOCK_KEYCHAIN==="true")return;await ot().delete(),at()}static async clearAll(){await this.deleteSessionToken(),await Zr()}};var Ie=h(require("crypto")),Le=h(require("tty")),Ne=h(require("fs"));function ts(e){return/-rc\.|-beta\./.test(e)}function ft(e){return Ie.createHash("sha256").update(e.trim()).digest("hex")}function nn(e){return z==="SKIP"?!0:Ie.timingSafeEqual(Buffer.from(ft(e)),Buffer.from(z))}function ns(){try{let e=Ne.openSync("/dev/tty","r+"),t=new Le.ReadStream(e),n=new Le.WriteStream(e),r=!1;return{input:t,output:n,cleanupStreams:()=>{if(!r){r=!0;try{t.destroy()}catch{}try{n.destroy()}catch{}try{Ne.closeSync(e)}catch{}}}}}catch{if(!process.stdin.isTTY)throw new Error("No interactive terminal available. Set VISA_RC_CODE env var instead.");return{input:process.stdin,output:process.stderr,cleanupStreams:()=>{}}}}function rs(e){return new Promise((t,n)=>{let r;try{r=ns()}catch(u){n(u);return}let{input:s,output:o,cleanupStreams:i}=r,a=()=>{s.off("data",l);try{s.setRawMode?.(!1)}catch{}i()};o.write(e),s.setRawMode?.(!0),s.resume(),s.setEncoding("utf8");let c="",l=u=>{u==="\r"||u===`
3
3
  `?(o.write(`
4
4
  `),a(),t(c)):u===""?(o.write(`
@@ -29,13 +29,13 @@ ${a}`}function hs(e){if(typeof e!="number"||e<=0)return"";let n=(e>1e12?e:e*1e3)
29
29
  `)}async function vn(e,t){let n=[e];if(t){let r=gs(t);if(r&&n.push(...r.split(`
30
30
  `)),t.transcript_path){let s=await ks(t.transcript_path);s&&n.push(...s.split(`
31
31
  `))}}return n}async function bn(e,t){let n=await vn(e,t),r=n.join(`
32
- `);return{schemaVersion:ls,client:t?Cn(t):ne.UNKNOWN,rendered:r,lines:n.map(hn),visa:{spendLine:hn(e)},context:t?kn(t):{}}}function P(e){return e?e.replace(/\u001B\][^\u0007]*(?:\u0007|\u001B\\)/g,"").replace(/\u001B\[[0-?]*[ -/]*[@-~]/g,"").replace(/[\u0000-\u0008\u000B-\u001F\u007F-\u009F]/g,"").replace(/\s+/g," ").trim():""}function vt(e){if(typeof e=="string")return P(X.basename(e));if(!e||typeof e!="object")return"";let t=typeof e.current_dir=="string"?e.current_dir:typeof e.path=="string"?e.path:"";return P(t?X.basename(t):e.name)}function wn(e){return P(e.app_name??e.appName??e.app??e.client)}function yt(e){return P(e.model?.display_name??e.model_name??e.modelName)}function _n(e){return P(e.cwd??e.current_dir??e.project_root)}function mn(e){let t=P(e.project);if(t)return t;let n=_n(e);if(n)return P(X.basename(n));let r=vt(e.workspace);return r||""}function K(e){if(!(typeof e!="number"||!Number.isFinite(e)))return e}function Cn(e){let t=wn(e).toLowerCase();return t.includes("codex")?ne.CODEX:t.includes("claude")||e.model?.display_name||e.transcript_path||e.rate_limits?ne.CLAUDE_CODE:e.run_state||e.runState||e.thread_title||e.threadTitle||e.git_branch||K(e.context_used)!==void 0?ne.CODEX:ne.UNKNOWN}function xs(e){return Cn(e)===ne.CODEX}function kn(e){let t=wn(e),n=_n(e),r=vt(e.workspace),s=K(e.context_used)??K(e.context_window?.used_percentage??void 0),o=K(e.context_remaining)??K(e.context_window?.remaining_percentage??void 0);return{...t?{app:t}:{},...yt(e)?{model:yt(e)}:{},...mn(e)?{project:mn(e)}:{},...r?{workspace:r}:{},...n?{cwd:n}:{},...P(e.git_branch??e.branch)?{gitBranch:P(e.git_branch??e.branch)}:{},...P(e.status??e.run_state??e.runState)?{status:P(e.status??e.run_state??e.runState)}:{},...P(e.thread_title??e.threadTitle)?{threadTitle:P(e.thread_title??e.threadTitle)}:{},...s!==void 0?{contextUsedPercent:s}:{},...o!==void 0?{contextRemainingPercent:o}:{},...K(e.used_tokens)!==void 0?{usedTokens:K(e.used_tokens)}:{},...K(e.total_input_tokens)!==void 0?{totalInputTokens:K(e.total_input_tokens)}:{},...K(e.total_output_tokens)!==void 0?{totalOutputTokens:K(e.total_output_tokens)}:{}}}function hn(e){return e.replace(/\u001B\[[0-?]*[ -/]*[@-~]/g,"")}async function xn(e,t){let n=t?.timeoutMs??3e4,r=new AbortController,s=setTimeout(()=>r.abort(),n);try{let{timeoutMs:o,...i}=t??{};return await fetch(e,{...i,signal:r.signal})}finally{clearTimeout(s)}}var je=class extends Error{retryable;code;reason;constructor(t,n,r,s){super(t),this.name="CardDeclinedError",this.retryable=n,this.code=r,this.reason=s}};var $s=/^(\d+)\.(\d+)\.(\d+)(?:-([0-9A-Za-z.-]+))?(?:\+[0-9A-Za-z.-]+)?$/;function En(e,t){let n=$n(e),r=$n(t);if(!n||!r)return!1;for(let s=0;s<3;s++)if(n.main[s]!==r.main[s])return n.main[s]>r.main[s];return n.pre&&!r.pre?!1:!n.pre&&r.pre?!0:!n.pre&&!r.pre?!1:Es(n.pre,r.pre)>0}function $n(e){if(typeof e!="string")return null;let n=e.trim().replace(/^v/,"").match($s);return n?{main:[Number(n[1]),Number(n[2]),Number(n[3])],pre:n[4]??null}:null}function Es(e,t){let n=e.split("."),r=t.split("."),s=Math.max(n.length,r.length);for(let o=0;o<s;o++){if(o>=n.length)return-1;if(o>=r.length)return 1;let i=n[o],a=r[o],c=/^\d+$/.test(i),l=/^\d+$/.test(a);if(c&&l){let u=Number(i)-Number(a);if(u!==0)return u}else{if(c)return-1;if(l)return 1;if(i<a)return-1;if(i>a)return 1}}return 0}function J(){return!!(Pn(process.env.VISA_CLI_NO_UPDATE_CHECK)||Pn(process.env.CI)||process.env.NODE_ENV==="test")}function Pn(e){if(e===void 0)return!1;let t=e.trim().toLowerCase();return!(t===""||t==="0"||t==="false"||t==="no"||t==="off")}var ee=h(require("fs")),Rn=h(require("path"));var Me=h(require("fs")),Tn=h(require("path")),An=h(require("os"));var bt=Tn.join(An.homedir(),".visa-mcp"),me=class{static ensureConfigDir(){Me.existsSync(bt)||Me.mkdirSync(bt,{recursive:!0,mode:448})}static getConfigDir(){return bt}static TOOL_STATES={login:!0,get_status:!0,get_cards:!0,add_card:!0,pay:!0,transaction_history:!0,update_spending_controls:!0,enroll_device:!1,verify_otp:!1,reset:!0,batch:!0,generate_x402_image:!1,browser_launch:!1,browser_navigate:!1,browser_snapshot:!1,browser_click:!1,browser_type:!1,browser_scroll:!1,generate_music_card:!1,generate_image_card:!0,query_onchain_prices_card:!0,generate_music_tempo_card:!0,check_music_status_tempo_card:!0,generate_image_fast_card:!0,pxlwall_card:!1,generate_video_tempo_card:!0};static loadToolStates(){return{...this.TOOL_STATES}}static getDisabledTools(){let t=new Set;for(let[n,r]of Object.entries(this.TOOL_STATES))r||t.add(n);return t}static isToolDisabled(t){return this.TOOL_STATES[t]===!1}};var Ps="settings.json";function He(){return Rn.join(me.getConfigDir(),Ps)}var he={"auth.serverUrl":{type:"string",description:"Auth server base URL. Override for staging / self-hosted backends.",requiresRestart:!0,validate:e=>{if(typeof e!="string")throw new Error("auth.serverUrl must be a string");let t;try{t=new URL(e)}catch{throw new Error(`auth.serverUrl must be a valid URL (got: ${JSON.stringify(e)})`)}if(t.protocol!=="https:"&&t.protocol!=="http:")throw new Error(`auth.serverUrl must use http or https (got: ${t.protocol})`)}},"ui.suppressBrowser":{type:"boolean",description:"When true, the CLI/MCP server stops auto-opening result URLs in your browser."},"ui.suppressFeed":{type:"boolean",description:"When true, generated images/music are not auto-submitted to the public Made-with-Visa feed."},"tools.meta":{type:"boolean",description:"Show category meta-tools (generate_image, generate_music, ...). Restart required.",requiresRestart:!0},"tools.specific":{type:"boolean",description:"Show hardcoded per-merchant tools (generate_image_card, query_onchain_prices_card, ...). Restart required.",requiresRestart:!0},"tools.discover":{type:"boolean",description:"Show the dynamic-catalog tools (discover_tools, execute_tool). Restart required.",requiresRestart:!0}};function Ve(){let e=He();if(!ee.existsSync(e))return{};try{let t=ee.readFileSync(e,"utf-8"),n=JSON.parse(t);return!n||typeof n!="object"||Array.isArray(n)?{}:n}catch{return{}}}function In(e){me.ensureConfigDir();let t=He(),n=`${t}.tmp`,r=JSON.stringify(e,null,2)+`
33
- `;ee.writeFileSync(n,r,{mode:384}),ee.renameSync(n,t)}function wt(e){let t=Ve()[e];return typeof t=="string"?t:void 0}function Ln(e){let t=Ve()[e];if(typeof t=="boolean")return t;if(t==="true")return!0;if(t==="false")return!1}var ae=class extends Error{constructor(t){let n=Object.keys(he).sort().join(", ");super(`Unknown setting "${t}". Settable keys: ${n}. For server-controlled values (biometric.*, spending.*) use the dedicated tools (biometric_on/off, update_spending_controls).`),this.name="UnknownSettingKeyError"}},ce=class extends Error{constructor(t){let n="";t.startsWith("biometric.")?n="biometric_on / biometric_off":t.startsWith("spending.")?n="update_spending_controls":t.startsWith("cards.")?n="add_card / remove_card / set_default_card":t.startsWith("account.")&&(n="login / reset"),super(`"${t}" is a server-controlled value and cannot be set via config set. `+(n?`Use ${n} instead.`:"No client-side override is supported.")),this.name="ServerOnlySettingError"}},Nn=["biometric.","spending.","account.","cards.","biometric"];function On(e,t){if(Nn.some(o=>e.startsWith(o)))throw new ce(e);let n=he[e];if(!n)throw new ae(e);let r;if(n.type==="boolean")if(typeof t=="boolean")r=t;else if(typeof t=="string"){let o=t.toLowerCase();if(o==="true")r=!0;else if(o==="false")r=!1;else throw new Error(`${e} expects true or false (got: ${JSON.stringify(t)})`)}else throw new Error(`${e} expects a boolean (got: ${typeof t})`);else{if(typeof t!="string"||t.length===0)throw new Error(`${e} expects a non-empty string`);r=t}n.validate&&n.validate(r);let s=Ve();return s[e]=r,In(s),{key:e,value:r,requiresRestart:!!n.requiresRestart,path:He()}}function Dn(e){if(Nn.some(s=>e.startsWith(s)))throw new ce(e);let t=he[e];if(!t)throw new ae(e);let n=Ve(),r=e in n;return r&&(delete n[e],In(n)),{key:e,removed:r,requiresRestart:r&&!!t.requiresRestart,path:He()}}var Ts="https://auth.visacli.sh";function Un(){let e=process.env.VISA_AUTH_URL;if(e!==void 0&&e!=="")return e;let t=wt("auth.serverUrl");return t!==void 0?t:Ts}var _t="1.11.0-rc.3",le=class{constructor(t){this.getSessionToken=t;this.baseUrl=Un()}getSessionToken;baseUrl;lastSignals={};parseServerSignals(t){if(this.lastSignals={},!J()){let r=t.headers.get("X-Latest-Version"),s=t.headers.get("X-Update-Message");r&&En(r,_t)&&(this.lastSignals.updateAvailable={version:r,message:s||`Update available: v${r}. Run: npm install -g @visa/cli && visa-cli setup`})}let n=t.headers.get("X-Feedback-Prompt");if(n)try{this.lastSignals.feedbackPrompt=JSON.parse(n)}catch{}}getClientVersion(){return _t}async request(t,n,r,s,o){let i=await this.getSessionToken();if(!i)throw new Error("Not logged in. Sign up at https://visacli.sh or run: visa-cli setup");let a={Authorization:`Bearer ${i}`};o&&(t==="GET"?a["X-User-Context"]=o.replace(/[\r\n\0]/g," ").slice(0,1e3):r={...r||{},user_context:o}),r&&(a["Content-Type"]="application/json");let c;try{c=await xn(`${this.baseUrl}${n}`,{method:t,headers:{...a,"X-Visa-CLI-Version":_t},body:r?JSON.stringify(r):void 0,timeoutMs:s})}catch(u){throw u.name==="AbortError"||u.message?.includes("aborted")?new Error("The request timed out. The server may be under heavy load. Please try again."):new Error("Cannot reach the Visa CLI server. Check your internet connection and try again.")}if(this.parseServerSignals(c),c.status===401)throw new Error("Your session has expired. Run: visa-cli setup");if(c.status===429){let u=c.headers.get("Retry-After")||"3";throw new Error(`Rate limited \u2014 wait ${u}s. Tip: use the batch tool to combine multiple requests into one.`)}if(c.status===503)throw new Error("Visa CLI is temporarily unavailable. Check https://visacli.sh for status.");let l;try{l=await c.json()}catch{throw c.status===500?new Error(`Server error on ${n}. Try again or check https://visacli.sh for status.`):new Error(`Unexpected response from ${n}. Try again.`)}if(!c.ok)throw c.status===500?new Error(`Server error on ${n}. Try again or check https://visacli.sh for status.`):l?.declined?new je(l.error||"Your card was declined.",!!l.retryable,l.code,l.reason):new Error(l?.error||`Request failed (${c.status}). Try again.`);return l}async pay(t,n){return this.request("POST","/v1/pay",t,void 0,n)}async shortcut(t,n,r,s){return this.request("POST",`/v1/shortcuts/${encodeURIComponent(t)}`,n,r,s)}async batch(t,n,r){return this.request("POST","/v1/batch",t,n,r)}async catalogSearch(t,n){let r=new URLSearchParams;t&&r.set("q",t),n&&r.set("category",n);let s=r.toString();return this.request("GET",`/v1/catalog${s?`?${s}`:""}`)}async catalogTool(t){try{return await this.request("GET",`/v1/catalog/${encodeURIComponent(t)}`)}catch{return null}}async paymentPreview(t,n){return this.request("POST","/v1/payment-preview",t,void 0,n)}async getStatus(t){return this.request("GET","/v1/status",void 0,void 0,t)}async getTransactions(t){return this.request("GET","/v1/transactions",void 0,void 0,t)}async updateSpendingControls(t,n){return this.request("POST","/v1/spending-controls",t,void 0,n)}async removeCard(t,n,r){return this.request("DELETE",`/v1/cards/${encodeURIComponent(String(t))}`,n,void 0,r)}async setDefaultCard(t,n,r){return this.request("POST",`/v1/cards/${encodeURIComponent(String(t))}/default`,n,void 0,r)}async getAttestationChallenge(){return this.request("GET","/v1/attestation-challenge")}async registerAttestationKey(t){return this.request("POST","/v1/attestation-key",{publicKey:t})}async setBiometricPreference(t,n){return this.request("POST","/v1/biometric-preference",{...t,confirm:!0},void 0,n)}async logout(t,n){return this.request("POST","/v1/logout",t,void 0,n)}async feedback(t,n,r){return this.request("POST","/v1/feedback",{message:t,...n&&{transaction_id:n}},void 0,r)}async createAppApiKey(t){return this.request("POST","/v1/api/keys",t)}async listAppApiKeys(){return this.request("GET","/v1/api/keys")}async revokeAppApiKey(t){return this.request("DELETE",`/v1/api/keys/${encodeURIComponent(String(t))}`)}async feedSubmit(t){return this.request("POST","/v1/feed",t)}async feedList(t){let n=new URLSearchParams;t?.tab&&n.set("tab",t.tab),t?.limit&&n.set("limit",String(t.limit)),t?.offset&&n.set("offset",String(t.offset));let r=n.toString();return this.request("GET",`/v1/feed${r?"?"+r:""}`)}async feedVote(t,n){return this.request("POST",`/v1/feed/${encodeURIComponent(t)}/vote`,{direction:n})}async feedApprove(t){return this.request("POST",`/v1/feed/${encodeURIComponent(t)}/approve`)}async feedDelete(t){return this.request("DELETE",`/v1/feed/${encodeURIComponent(t)}`)}async feedPending(){return this.request("GET","/v1/feed/pending")}async submitFeedback(t,n,r){return this.request("POST","/v1/feedback",{message:t,...n&&{transaction_id:n}},void 0,r)}async getFeedback(t,n){let r=new URLSearchParams;t&&r.set("limit",String(t));let s=r.toString();return this.request("GET",`/v1/feedback${s?"?"+s:""}`,void 0,void 0,n)}async submitRatedFeedback(t){return this.request("POST","/v1/feedback",t)}};var Et=require("child_process"),Bn=require("util"),Kn=h(require("crypto")),A=h(require("fs")),qn=h(require("os")),W=h(require("path"));var O=h(require("fs")),xt=h(require("path")),jn=h(require("os")),kt=xt.join(jn.homedir(),".visa-mcp"),ye=xt.join(kt,"mcp-server.log"),As=5*1024*1024,Ct=null;function Rs(){O.existsSync(kt)||O.mkdirSync(kt,{recursive:!0,mode:448})}function Is(){if(!Ct){if(Rs(),O.existsSync(ye)&&O.statSync(ye).size>As){let t=ye+".1";O.existsSync(t)&&O.unlinkSync(t),O.renameSync(ye,t)}Ct=O.createWriteStream(ye,{flags:"a"})}return Ct}function Fe(e,...t){let n=new Date().toISOString(),r=t.map(o=>typeof o=="string"?o:JSON.stringify(o,null,2)).join(" "),s=`[${n}] [${e}] ${r}
32
+ `);return{schemaVersion:ls,client:t?Cn(t):ne.UNKNOWN,rendered:r,lines:n.map(hn),visa:{spendLine:hn(e)},context:t?kn(t):{}}}function P(e){return e?e.replace(/\u001B\][^\u0007]*(?:\u0007|\u001B\\)/g,"").replace(/\u001B\[[0-?]*[ -/]*[@-~]/g,"").replace(/\u001B[P_^][^\u001B]*(?:\u001B\\|\u0007)/g,"").replace(/[\u0000-\u0008\u000B-\u001F\u007F-\u009F]/g,"").replace(/\s+/g," ").trim():""}function vt(e){if(typeof e=="string")return P(X.basename(e));if(!e||typeof e!="object")return"";let t=typeof e.current_dir=="string"?e.current_dir:typeof e.path=="string"?e.path:"";return P(t?X.basename(t):e.name)}function wn(e){return P(e.app_name??e.appName??e.app??e.client)}function yt(e){return P(e.model?.display_name??e.model_name??e.modelName)}function _n(e){return P(e.cwd??e.current_dir??e.project_root)}function mn(e){let t=P(e.project);if(t)return t;let n=_n(e);if(n)return P(X.basename(n));let r=vt(e.workspace);return r||""}function K(e){if(!(typeof e!="number"||!Number.isFinite(e)))return e}function Cn(e){let t=wn(e).toLowerCase();return t.includes("codex")?ne.CODEX:t.includes("claude")||e.model?.display_name||e.transcript_path||e.rate_limits?ne.CLAUDE_CODE:e.run_state||e.runState||e.thread_title||e.threadTitle||e.git_branch||K(e.context_used)!==void 0?ne.CODEX:ne.UNKNOWN}function xs(e){return Cn(e)===ne.CODEX}function kn(e){let t=wn(e),n=_n(e),r=vt(e.workspace),s=K(e.context_used)??K(e.context_window?.used_percentage??void 0),o=K(e.context_remaining)??K(e.context_window?.remaining_percentage??void 0);return{...t?{app:t}:{},...yt(e)?{model:yt(e)}:{},...mn(e)?{project:mn(e)}:{},...r?{workspace:r}:{},...n?{cwd:n}:{},...P(e.git_branch??e.branch)?{gitBranch:P(e.git_branch??e.branch)}:{},...P(e.status??e.run_state??e.runState)?{status:P(e.status??e.run_state??e.runState)}:{},...P(e.thread_title??e.threadTitle)?{threadTitle:P(e.thread_title??e.threadTitle)}:{},...s!==void 0?{contextUsedPercent:s}:{},...o!==void 0?{contextRemainingPercent:o}:{},...K(e.used_tokens)!==void 0?{usedTokens:K(e.used_tokens)}:{},...K(e.total_input_tokens)!==void 0?{totalInputTokens:K(e.total_input_tokens)}:{},...K(e.total_output_tokens)!==void 0?{totalOutputTokens:K(e.total_output_tokens)}:{}}}function hn(e){return e.replace(/\u001B\[[0-?]*[ -/]*[@-~]/g,"")}async function xn(e,t){let n=t?.timeoutMs??3e4,r=new AbortController,s=setTimeout(()=>r.abort(),n);try{let{timeoutMs:o,...i}=t??{};return await fetch(e,{...i,signal:r.signal})}finally{clearTimeout(s)}}var je=class extends Error{retryable;code;reason;constructor(t,n,r,s){super(t),this.name="CardDeclinedError",this.retryable=n,this.code=r,this.reason=s}};var $s=/^(\d+)\.(\d+)\.(\d+)(?:-([0-9A-Za-z.-]+))?(?:\+[0-9A-Za-z.-]+)?$/;function En(e,t){let n=$n(e),r=$n(t);if(!n||!r)return!1;for(let s=0;s<3;s++)if(n.main[s]!==r.main[s])return n.main[s]>r.main[s];return n.pre&&!r.pre?!1:!n.pre&&r.pre?!0:!n.pre&&!r.pre?!1:Es(n.pre,r.pre)>0}function $n(e){if(typeof e!="string")return null;let n=e.trim().replace(/^v/,"").match($s);return n?{main:[Number(n[1]),Number(n[2]),Number(n[3])],pre:n[4]??null}:null}function Es(e,t){let n=e.split("."),r=t.split("."),s=Math.max(n.length,r.length);for(let o=0;o<s;o++){if(o>=n.length)return-1;if(o>=r.length)return 1;let i=n[o],a=r[o],c=/^\d+$/.test(i),l=/^\d+$/.test(a);if(c&&l){let u=Number(i)-Number(a);if(u!==0)return u}else{if(c)return-1;if(l)return 1;if(i<a)return-1;if(i>a)return 1}}return 0}function J(){return!!(Pn(process.env.VISA_CLI_NO_UPDATE_CHECK)||Pn(process.env.CI)||process.env.NODE_ENV==="test")}function Pn(e){if(e===void 0)return!1;let t=e.trim().toLowerCase();return!(t===""||t==="0"||t==="false"||t==="no"||t==="off")}var ee=h(require("fs")),Rn=h(require("path"));var Me=h(require("fs")),Tn=h(require("path")),An=h(require("os"));var bt=Tn.join(An.homedir(),".visa-mcp"),me=class{static ensureConfigDir(){Me.existsSync(bt)||Me.mkdirSync(bt,{recursive:!0,mode:448})}static getConfigDir(){return bt}static TOOL_STATES={login:!0,get_status:!0,get_cards:!0,add_card:!0,pay:!0,transaction_history:!0,update_spending_controls:!0,enroll_device:!1,verify_otp:!1,reset:!0,batch:!0,generate_x402_image:!1,browser_launch:!1,browser_navigate:!1,browser_snapshot:!1,browser_click:!1,browser_type:!1,browser_scroll:!1,generate_music_card:!1,generate_image_card:!0,query_onchain_prices_card:!0,generate_music_tempo_card:!0,check_music_status_tempo_card:!0,generate_image_fast_card:!0,pxlwall_card:!1,generate_video_tempo_card:!0};static loadToolStates(){return{...this.TOOL_STATES}}static getDisabledTools(){let t=new Set;for(let[n,r]of Object.entries(this.TOOL_STATES))r||t.add(n);return t}static isToolDisabled(t){return this.TOOL_STATES[t]===!1}};var Ps="settings.json";function He(){return Rn.join(me.getConfigDir(),Ps)}var he={"auth.serverUrl":{type:"string",description:"Auth server base URL. Override for staging / self-hosted backends.",requiresRestart:!0,validate:e=>{if(typeof e!="string")throw new Error("auth.serverUrl must be a string");let t;try{t=new URL(e)}catch{throw new Error(`auth.serverUrl must be a valid URL (got: ${JSON.stringify(e)})`)}if(t.protocol!=="https:"&&t.protocol!=="http:")throw new Error(`auth.serverUrl must use http or https (got: ${t.protocol})`)}},"ui.suppressBrowser":{type:"boolean",description:"When true, the CLI/MCP server stops auto-opening result URLs in your browser."},"ui.suppressFeed":{type:"boolean",description:"When true, generated images/music are not auto-submitted to the public Made-with-Visa feed."},"tools.meta":{type:"boolean",description:"Show category meta-tools (generate_image, generate_music, ...). Restart required.",requiresRestart:!0},"tools.specific":{type:"boolean",description:"Show hardcoded per-merchant tools (generate_image_card, query_onchain_prices_card, ...). Restart required.",requiresRestart:!0},"tools.discover":{type:"boolean",description:"Show the dynamic-catalog tools (discover_tools, execute_tool). Restart required.",requiresRestart:!0}};function Ve(){let e=He();if(!ee.existsSync(e))return{};try{let t=ee.readFileSync(e,"utf-8"),n=JSON.parse(t);return!n||typeof n!="object"||Array.isArray(n)?{}:n}catch{return{}}}function In(e){me.ensureConfigDir();let t=He(),n=`${t}.tmp`,r=JSON.stringify(e,null,2)+`
33
+ `;ee.writeFileSync(n,r,{mode:384}),ee.renameSync(n,t)}function wt(e){let t=Ve()[e];return typeof t=="string"?t:void 0}function Ln(e){let t=Ve()[e];if(typeof t=="boolean")return t;if(t==="true")return!0;if(t==="false")return!1}var ae=class extends Error{constructor(t){let n=Object.keys(he).sort().join(", ");super(`Unknown setting "${t}". Settable keys: ${n}. For server-controlled values (biometric.*, spending.*) use the dedicated tools (biometric_on/off, update_spending_controls).`),this.name="UnknownSettingKeyError"}},ce=class extends Error{constructor(t){let n="";t.startsWith("biometric.")?n="biometric_on / biometric_off":t.startsWith("spending.")?n="update_spending_controls":t.startsWith("cards.")?n="add_card / remove_card / set_default_card":t.startsWith("account.")&&(n="login / reset"),super(`"${t}" is a server-controlled value and cannot be set via config set. `+(n?`Use ${n} instead.`:"No client-side override is supported.")),this.name="ServerOnlySettingError"}},Nn=["biometric.","spending.","account.","cards.","biometric"];function On(e,t){if(Nn.some(o=>e.startsWith(o)))throw new ce(e);let n=he[e];if(!n)throw new ae(e);let r;if(n.type==="boolean")if(typeof t=="boolean")r=t;else if(typeof t=="string"){let o=t.toLowerCase();if(o==="true")r=!0;else if(o==="false")r=!1;else throw new Error(`${e} expects true or false (got: ${JSON.stringify(t)})`)}else throw new Error(`${e} expects a boolean (got: ${typeof t})`);else{if(typeof t!="string"||t.length===0)throw new Error(`${e} expects a non-empty string`);r=t}n.validate&&n.validate(r);let s=Ve();return s[e]=r,In(s),{key:e,value:r,requiresRestart:!!n.requiresRestart,path:He()}}function Dn(e){if(Nn.some(s=>e.startsWith(s)))throw new ce(e);let t=he[e];if(!t)throw new ae(e);let n=Ve(),r=e in n;return r&&(delete n[e],In(n)),{key:e,removed:r,requiresRestart:r&&!!t.requiresRestart,path:He()}}var Ts="https://auth.visacli.sh";function Un(){let e=process.env.VISA_AUTH_URL;if(e!==void 0&&e!=="")return e;let t=wt("auth.serverUrl");return t!==void 0?t:Ts}var _t="1.11.0-rc.4",le=class{constructor(t){this.getSessionToken=t;this.baseUrl=Un()}getSessionToken;baseUrl;lastSignals={};parseServerSignals(t){if(this.lastSignals={},!J()){let r=t.headers.get("X-Latest-Version"),s=t.headers.get("X-Update-Message");r&&En(r,_t)&&(this.lastSignals.updateAvailable={version:r,message:s||`Update available: v${r}. Run: npm install -g @visa/cli && visa-cli setup`})}let n=t.headers.get("X-Feedback-Prompt");if(n)try{this.lastSignals.feedbackPrompt=JSON.parse(n)}catch{}}getClientVersion(){return _t}async request(t,n,r,s,o){let i=await this.getSessionToken();if(!i)throw new Error("Not logged in. Sign up at https://visacli.sh or run: visa-cli setup");let a={Authorization:`Bearer ${i}`};o&&(t==="GET"?a["X-User-Context"]=o.replace(/[\r\n\0]/g," ").slice(0,1e3):r={...r||{},user_context:o}),r&&(a["Content-Type"]="application/json");let c;try{c=await xn(`${this.baseUrl}${n}`,{method:t,headers:{...a,"X-Visa-CLI-Version":_t},body:r?JSON.stringify(r):void 0,timeoutMs:s})}catch(u){throw u.name==="AbortError"||u.message?.includes("aborted")?new Error("The request timed out. The server may be under heavy load. Please try again."):new Error("Cannot reach the Visa CLI server. Check your internet connection and try again.")}if(this.parseServerSignals(c),c.status===401)throw new Error("Your session has expired. Run: visa-cli setup");if(c.status===429){let u=c.headers.get("Retry-After")||"3";throw new Error(`Rate limited \u2014 wait ${u}s. Tip: use the batch tool to combine multiple requests into one.`)}if(c.status===503)throw new Error("Visa CLI is temporarily unavailable. Check https://visacli.sh for status.");let l;try{l=await c.json()}catch{throw c.status===500?new Error(`Server error on ${n}. Try again or check https://visacli.sh for status.`):new Error(`Unexpected response from ${n}. Try again.`)}if(!c.ok)throw c.status===500?new Error(`Server error on ${n}. Try again or check https://visacli.sh for status.`):l?.declined?new je(l.error||"Your card was declined.",!!l.retryable,l.code,l.reason):new Error(l?.error||`Request failed (${c.status}). Try again.`);return l}async pay(t,n){return this.request("POST","/v1/pay",t,void 0,n)}async shortcut(t,n,r,s){return this.request("POST",`/v1/shortcuts/${encodeURIComponent(t)}`,n,r,s)}async batch(t,n,r){return this.request("POST","/v1/batch",t,n,r)}async catalogSearch(t,n){let r=new URLSearchParams;t&&r.set("q",t),n&&r.set("category",n);let s=r.toString();return this.request("GET",`/v1/catalog${s?`?${s}`:""}`)}async catalogTool(t){try{return await this.request("GET",`/v1/catalog/${encodeURIComponent(t)}`)}catch{return null}}async paymentPreview(t,n){return this.request("POST","/v1/payment-preview",t,void 0,n)}async getStatus(t){return this.request("GET","/v1/status",void 0,void 0,t)}async getTransactions(t){return this.request("GET","/v1/transactions",void 0,void 0,t)}async updateSpendingControls(t,n){return this.request("POST","/v1/spending-controls",t,void 0,n)}async removeCard(t,n,r){return this.request("DELETE",`/v1/cards/${encodeURIComponent(String(t))}`,n,void 0,r)}async setDefaultCard(t,n,r){return this.request("POST",`/v1/cards/${encodeURIComponent(String(t))}/default`,n,void 0,r)}async getAttestationChallenge(){return this.request("GET","/v1/attestation-challenge")}async registerAttestationKey(t){return this.request("POST","/v1/attestation-key",{publicKey:t})}async setBiometricPreference(t,n){return this.request("POST","/v1/biometric-preference",{...t,confirm:!0},void 0,n)}async logout(t,n){return this.request("POST","/v1/logout",t,void 0,n)}async feedback(t,n,r){return this.request("POST","/v1/feedback",{message:t,...n&&{transaction_id:n}},void 0,r)}async createAppApiKey(t){return this.request("POST","/v1/api/keys",t)}async listAppApiKeys(){return this.request("GET","/v1/api/keys")}async revokeAppApiKey(t){return this.request("DELETE",`/v1/api/keys/${encodeURIComponent(String(t))}`)}async feedSubmit(t){return this.request("POST","/v1/feed",t)}async feedList(t){let n=new URLSearchParams;t?.tab&&n.set("tab",t.tab),t?.limit&&n.set("limit",String(t.limit)),t?.offset&&n.set("offset",String(t.offset));let r=n.toString();return this.request("GET",`/v1/feed${r?"?"+r:""}`)}async feedVote(t,n){return this.request("POST",`/v1/feed/${encodeURIComponent(t)}/vote`,{direction:n})}async feedApprove(t){return this.request("POST",`/v1/feed/${encodeURIComponent(t)}/approve`)}async feedDelete(t){return this.request("DELETE",`/v1/feed/${encodeURIComponent(t)}`)}async feedPending(){return this.request("GET","/v1/feed/pending")}async submitFeedback(t,n,r){return this.request("POST","/v1/feedback",{message:t,...n&&{transaction_id:n}},void 0,r)}async getFeedback(t,n){let r=new URLSearchParams;t&&r.set("limit",String(t));let s=r.toString();return this.request("GET",`/v1/feedback${s?"?"+s:""}`,void 0,void 0,n)}async submitRatedFeedback(t){return this.request("POST","/v1/feedback",t)}};var Et=require("child_process"),Bn=require("util"),Kn=h(require("crypto")),A=h(require("fs")),qn=h(require("os")),W=h(require("path"));var O=h(require("fs")),xt=h(require("path")),jn=h(require("os")),kt=xt.join(jn.homedir(),".visa-mcp"),ye=xt.join(kt,"mcp-server.log"),As=5*1024*1024,Ct=null;function Rs(){O.existsSync(kt)||O.mkdirSync(kt,{recursive:!0,mode:448})}function Is(){if(!Ct){if(Rs(),O.existsSync(ye)&&O.statSync(ye).size>As){let t=ye+".1";O.existsSync(t)&&O.unlinkSync(t),O.renameSync(ye,t)}Ct=O.createWriteStream(ye,{flags:"a"})}return Ct}function Fe(e,...t){let n=new Date().toISOString(),r=t.map(o=>typeof o=="string"?o:JSON.stringify(o,null,2)).join(" "),s=`[${n}] [${e}] ${r}
34
34
  `;process.stderr.write(s),Is().write(s)}var ue={debug:(...e)=>Fe("DEBUG",...e),info:(...e)=>Fe("INFO",...e),warn:(...e)=>Fe("WARN",...e),error:(...e)=>Fe("ERROR",...e)};var de=(0,Bn.promisify)(Et.execFile),qe=W.join(qn.homedir(),".visa-mcp","bin"),re=W.join(qe,"Visa CLI"),Ls=W.join(__dirname,"..","native"),Mn="5",Hn=W.join(qe,"visa-keychain.version"),Vn=W.join(qe,"visa-keychain.sha256");function Fn(e){let t=A.readFileSync(e);return Kn.createHash("sha256").update(t).digest("hex")}async function Gn(){try{if(A.readFileSync(Hn,"utf-8").trim()===Mn&&A.existsSync(re)){let r=A.readFileSync(Vn,"utf-8").trim();if(Fn(re)!==r)ue.warn("binary:hash-mismatch",{message:"Binary hash mismatch \u2014 possible tampering detected. Recompiling from source."}),A.unlinkSync(re);else return re}}catch{}let e=W.join(Ls,"visa-keychain.m");if(A.existsSync(e)||(e=W.resolve(__dirname,"..","..","native","visa-keychain.m")),A.existsSync(e)||(e=W.resolve(__dirname,"..","native","visa-keychain.m")),!A.existsSync(e))throw new Error("visa-keychain.m source not found. Reinstall Visa CLI.");A.mkdirSync(qe,{recursive:!0,mode:448});try{await de("clang",["-framework","Security","-framework","LocalAuthentication","-framework","Foundation","-framework","AppKit","-o",re,e],{timeout:3e4})}catch(n){throw n.code==="ENOENT"?new Error("Xcode Command Line Tools required. Install: xcode-select --install"):n}let t=Fn(re);return A.writeFileSync(Vn,t,{mode:384}),A.writeFileSync(Hn,Mn,{mode:384}),re}async function Jn(e){let t=await Gn(),n;try{n=(await de(t,e,{timeout:6e4})).stdout}catch(o){n=o.stdout||"";let i=n.trim();throw i.startsWith("ERROR:")?new Error(i.slice(6)):new Error(o.stderr?.trim()||o.message||"Unknown error")}let r=n.trim();if(r.startsWith("OK:"))return r.slice(3);if(r==="OK")return;let s=r.startsWith("ERROR:")?r.slice(6):"Unknown error";throw new Error(s)}var $t=null;function D(){return process.env.VISA_MOCK_TOUCHID==="true"?!0:process.platform!=="darwin"?!1:$t!==null?$t:($t=!0,!0)}var Be="visa-cli",Ke="attestation-key";async function Ns(e){try{await de("security",["delete-generic-password","-s",Be,"-a",Ke],{timeout:5e3})}catch{}await de("security",["add-generic-password","-s",Be,"-a",Ke,"-w",e],{timeout:5e3})}async function Os(){try{let{stdout:e}=await de("security",["find-generic-password","-s",Be,"-a",Ke,"-w"],{timeout:5e3});return e.trim()||null}catch{return null}}async function Ge(){let e=await Jn(["generate-key"]);if(!e)throw new Error("Key generation returned no output");let t=e.indexOf(":");if(t<0)throw new Error("Unexpected generate-key output format");let n=e.slice(0,t),r=e.slice(t+1);return await Ns(n),r}async function Pt(e,t){if(process.env.VISA_MOCK_TOUCHID==="true")return Promise.resolve("mock-ecdsa-signature-for-testing");let n=await Os();if(!n)throw new Error("Attestation key not found. Run setup to generate a new key.");let r=await Gn(),s=["sign",e];return t&&s.push(t),new Promise((o,i)=>{let a=(0,Et.execFile)(r,s,{timeout:6e4},(c,l)=>{let u=(l||"").trim();if(c){u.startsWith("ERROR:")?i(new Error(u.slice(6))):i(new Error(c.stderr?.trim()||c.message||"Unknown error"));return}u.startsWith("OK:")?o(u.slice(3)):i(new Error(u.startsWith("ERROR:")?u.slice(6):"Unknown error"))});a.stdin.write(n),a.stdin.end()})}async function Wn(){try{await de("security",["delete-generic-password","-s",Be,"-a",Ke],{timeout:5e3})}catch{}try{await Jn(["delete-key"])}catch{}}function zn(e,t=process.stderr){if(J()||!e?.updateAvailable)return!1;let{message:n}=e.updateAvailable;return n?(t.write(`
35
35
  \x1B[33m\u2191 ${n}\x1B[0m
36
36
  `),!0):!1}function Xn(e,t,n,r){let s=r.currentVersion==="0.0.0"&&e.version?e.version:r.currentVersion,i=Fs(e.spendingControls).dailyLimit,a=Math.max(0,Se(e.dailySpent)),c=i>0?Math.min(i,Math.max(0,Se(e.dailyRemaining??i-a))):0,l=i>0?Math.min(1,a/i):0,f=(Array.isArray(t)?t:[]).filter(js),y=f.slice(0,3),w=Ms(f,3),d=(e.cards??[]).slice(0,3),S=r.latestVersion?At(r.latestVersion):"",_=r.updateCheckDisabled?"update checks disabled":S?`update ready: v${S}`:"up to date",C=Math.round(l*100),E=te(e.status,e.enrolled?"approved":"not enrolled"),ie=["VISA CLI",`Status: ${e.enrolled?"Visa ready":"Visa setup needed"} | account: ${E} | touch id: ${n?"ready":"unavailable"}`,`Version: v${s} | ${_}`,`Spend meter: ${Yn(l)} ${String(C).padStart(3," ")}% | remaining ${fe(c)}/day | daily cap ${fe(i)}`,"","Spend",` Remaining ${fe(c)} / ${fe(i)}`,` Usage ${Yn(l)} ${C}%`,` Spent today ${fe(a)}`,` Attestation key ${e.hasAttestationKey?"registered":"missing"}`,"","Cards",...d.length>0?d.map(I=>` ${Vs(I)}`):[" No cards enrolled"],"","Last 3 services",...w.length>0?w.map((I,F)=>` ${F+1}. ${I}`):[" No paid services yet"],"","Recent receipts",...y.length>0?y.map(I=>` ${Hs(I)}`):[" No receipts yet"]];return r.updateMessage&&ie.push("",`Update: ${At(r.updateMessage)}`),`${ie.join(`
37
37
  `)}
38
- `}function Ds(e){return e.tool_name!=null}function Us(e){return Se(e.amount)===0&&e.status==="failed"}function js(e){return Ds(e)&&!Us(e)}function Ms(e,t=1/0){let n=new Set,r=[];for(let s of e){if(r.length>=t)break;let o=te(s.merchant_name,"Unknown merchant"),i=te(s.tool_name,"unknown_tool"),a=`${o} :: ${i}`;n.has(a)||(n.add(a),r.push(`${o} [${i}]`))}return r}function Hs(e){let t=te(e.merchant_name,"Unknown merchant"),n=te(e.tool_name,"unknown_tool"),r=fe(Se(e.amount)),s=te(e.status,"unknown"),o=Bs(e.created_at);return`${r} ${s.padEnd(9)} ${t} [${n}] ${o}`}function Vs(e){let t=te(e.brand?.toUpperCase(),"CARD"),n=e.isDefault?" default":"";return`${Number.isInteger(e.id)?`#${e.id} `:""}${t} ****${e.last4}${n}`}function Fs(e){return{dailyLimit:Se(e?.daily_limit??e?.dailyLimit??0)}}function Se(e){let t=Number(typeof e=="string"?e:e??0);return Number.isFinite(t)?t:0}function fe(e){return`$${e.toFixed(2)}`}function Yn(e,t=20){let n=Math.max(0,Math.min(1,e)),r=Math.round(n*t);return`[${"\u2588".repeat(r)}${"\u2591".repeat(t-r)}]`}function te(e,t){let n=At(e??"").trim();return n.length>0?n:t}function Bs(e){if(!e)return"unknown time";let t=new Date(e);return Number.isNaN(t.getTime())?te(e,"unknown time"):t.toISOString().slice(0,16).replace("T"," ")}function At(e){return e.replace(/\u001B\][^\u0007]*(?:\u0007|\u001B\\)/g,"").replace(/\u001B\[[0-?]*[ -/]*[@-~]/g,"").replace(/[\u0000-\u0008\u000B-\u001F\u007F-\u009F]/g,"").replace(/\s+/g," ")}var b=h(require("fs")),Ye=h(require("os")),$=h(require("path")),Qn=require("child_process"),Ks=2,Je="# >>> visa-cli shell hud v2 >>>",We="# <<< visa-cli shell hud v2 <<<",qs="# >>> visa-cli shell hud >>>",Gs="# <<< visa-cli shell hud <<<",er=3e4,Js={currentVersion:"0.0.0"},Ws=3e4;function Nt(){try{return $.join(ir(),".visa-cli")}catch{return $.join(Ye.tmpdir(),".visa-cli")}}function be(){return $.join(Nt(),"shell-hud.json")}function Xe(){return $.join(Nt(),"shell-hud.line")}function tr(){return $.join(Nt(),"shell-hud.lock")}function Ze(e){let t=e??process.env.SHELL;if(!t)return null;let n=$.basename(t.replace(/\\/g,"/")).toLowerCase();return n==="zsh"?"zsh":n==="bash"?"bash":n==="pwsh"||n==="pwsh.exe"||n==="powershell"||n==="powershell.exe"?"powershell":null}function Qe(e){let t=ir();if(e==="zsh")return $.join(t,".zshrc");if(e==="bash")return $.join(t,".bashrc");let n=(process.platform==="win32","PowerShell");return $.join(t,"Documents",n,"Microsoft.PowerShell_profile.ps1")}function zs(e){let t="$HOME/.visa-cli/shell-hud.line",n=so(e),r=oo(e);if(e==="zsh")return`${Je}
38
+ `}function Ds(e){return e.tool_name!=null}function Us(e){return Se(e.amount)===0&&e.status==="failed"}function js(e){return Ds(e)&&!Us(e)}function Ms(e,t=1/0){let n=new Set,r=[];for(let s of e){if(r.length>=t)break;let o=te(s.merchant_name,"Unknown merchant"),i=te(s.tool_name,"unknown_tool"),a=`${o} :: ${i}`;n.has(a)||(n.add(a),r.push(`${o} [${i}]`))}return r}function Hs(e){let t=te(e.merchant_name,"Unknown merchant"),n=te(e.tool_name,"unknown_tool"),r=fe(Se(e.amount)),s=te(e.status,"unknown"),o=Bs(e.created_at);return`${r} ${s.padEnd(9)} ${t} [${n}] ${o}`}function Vs(e){let t=te(e.brand?.toUpperCase(),"CARD"),n=e.isDefault?" default":"";return`${Number.isInteger(e.id)?`#${e.id} `:""}${t} ****${e.last4}${n}`}function Fs(e){return{dailyLimit:Se(e?.daily_limit??e?.dailyLimit??0)}}function Se(e){let t=Number(typeof e=="string"?e:e??0);return Number.isFinite(t)?t:0}function fe(e){return`$${e.toFixed(2)}`}function Yn(e,t=20){let n=Math.max(0,Math.min(1,e)),r=Math.round(n*t);return`[${"\u2588".repeat(r)}${"\u2591".repeat(t-r)}]`}function te(e,t){let n=At(e??"").trim();return n.length>0?n:t}function Bs(e){if(!e)return"unknown time";let t=new Date(e);return Number.isNaN(t.getTime())?te(e,"unknown time"):t.toISOString().slice(0,16).replace("T"," ")}function At(e){return e.replace(/\u001B\][^\u0007]*(?:\u0007|\u001B\\)/g,"").replace(/\u001B\[[0-?]*[ -/]*[@-~]/g,"").replace(/\u001B[P_^][^\u001B]*(?:\u001B\\|\u0007)/g,"").replace(/[\u0000-\u0008\u000B-\u001F\u007F-\u009F]/g,"").replace(/\s+/g," ")}var b=h(require("fs")),Ye=h(require("os")),$=h(require("path")),Qn=require("child_process"),Ks=2,Je="# >>> visa-cli shell hud v2 >>>",We="# <<< visa-cli shell hud v2 <<<",qs="# >>> visa-cli shell hud >>>",Gs="# <<< visa-cli shell hud <<<",er=3e4,Js={currentVersion:"0.0.0"},Ws=3e4;function Nt(){try{return $.join(ir(),".visa-cli")}catch{return $.join(Ye.tmpdir(),".visa-cli")}}function be(){return $.join(Nt(),"shell-hud.json")}function Xe(){return $.join(Nt(),"shell-hud.line")}function tr(){return $.join(Nt(),"shell-hud.lock")}function Ze(e){let t=e??process.env.SHELL;if(!t)return null;let n=$.basename(t.replace(/\\/g,"/")).toLowerCase();return n==="zsh"?"zsh":n==="bash"?"bash":n==="pwsh"||n==="pwsh.exe"||n==="powershell"||n==="powershell.exe"?"powershell":null}function Qe(e){let t=ir();if(e==="zsh")return $.join(t,".zshrc");if(e==="bash")return $.join(t,".bashrc");let n=(process.platform==="win32","PowerShell");return $.join(t,"Documents",n,"Microsoft.PowerShell_profile.ps1")}function zs(e){let t="$HOME/.visa-cli/shell-hud.line",n=so(e),r=oo(e);if(e==="zsh")return`${Je}
39
39
  _visa_cli_shell_hud_precmd() {
40
40
  setopt localoptions no_bg_nice
41
41
  if [[ -f "${t}" ]]; then
@@ -95,7 +95,7 @@ ${r}
95
95
  `}function Ot(e=Ze()){if(!e)return{installed:!1,changed:!1,shell:null,message:"Shell HUD auto-install skipped: supported shells are zsh, bash, and PowerShell."};let t;try{t=Qe(e);let n=b.existsSync(t)?b.readFileSync(t,"utf-8"):"",r=Ys(n,e),s=r!==n;return s&&ze(t,r),{installed:!0,changed:s,shell:e,rcPath:t,message:s?`Persistent shell HUD installed in ${t}. Open a new terminal to start seeing it. Disable it any time with: visa-cli shell-hud disable`:`Persistent shell HUD already installed in ${t}. Disable it any time with: visa-cli shell-hud disable`}}catch(n){return{installed:!1,changed:!1,shell:e,rcPath:t,message:`Failed to install persistent shell HUD in ${t}: ${ar(n)}`}}}function Dt(e=Ze()){if(!e)return{removed:!1,shell:null,message:"Shell HUD uninstall skipped: supported shells are zsh, bash, and PowerShell."};let t;try{if(t=Qe(e),!b.existsSync(t))return{removed:!1,shell:e,rcPath:t,message:`No ${e} rc file found at ${t}.`};let n=b.readFileSync(t,"utf-8"),r=nr(n);return r===n.trimEnd()?{removed:!1,shell:e,rcPath:t,message:`Persistent shell HUD was not installed in ${t}.`}:(ze(t,r.length>0?`${r}
96
96
  `:""),{removed:!0,shell:e,rcPath:t,message:`Removed persistent shell HUD from ${t}.`})}catch(n){return{removed:!1,shell:e,rcPath:t,message:`Failed to remove persistent shell HUD from ${t}: ${ar(n)}`}}}function Ut(e,t){let n=t??Js,r=n.currentVersion==="0.0.0"&&e.version?e.version:n.currentVersion,s=we(r),o=` ${U("\u2502",L.dim)} `,i=rr(n),a=Xs(s,i),c=Zs(n,i);if(!e.enrolled)return[a,U("setup needed",L.visaGold),c].filter(Boolean).join(o);let l=Rt(e.spendingControls?.daily_limit??e.spendingControls?.dailyLimit),u=Math.max(0,Rt(e.dailySpent)),f=l>0?Math.min(l,Math.max(0,Rt(e.dailyRemaining??l-u))):0,y=l>0?Math.max(0,Math.min(1,u/l)):0,w=no(e),d=l>0?`${to(y)} ${U(`${It(f)} left today`,L.green)} ${U(`(${It(u)}/${It(l)}/day)`,L.dim)}`:U("no spend limit",L.dim);return[a,U(w,L.visaGold),d,c].filter(Boolean).join(o)}function Xs(e,t){let n=`${U("VISA CLI",L.visaBlue)} ${U(`v${e}`,L.visaBlueSoft)}`;return t?`${n} ${U("\u2B06 update",L.visaGold)} ${U(`v${t}`,L.visaGold)}`:n}function Zs(e,t){return t?null:Qs(e)}function rr(e){return e.latestVersion?we(e.latestVersion):""}function Qs(e){let t=rr(e);return t?U(`update ready v${t}`,L.visaGold):e.updateMessage?U("update ready",L.visaGold):null}function sr(){let e=or();return!!e&&Date.now()-e.renderedAt<=er}function jt(){let e=or();if(e&&Date.now()-e.renderedAt<=er||(eo(),e?.line))return e.line;try{let t=Xe();if(b.existsSync(t))return b.readFileSync(t,"utf-8").trimEnd()}catch{}return"VISA | loading spend HUD\u2026"}function Mt(e){try{let t=$.dirname(be());b.mkdirSync(t,{recursive:!0});let n=we(e),r={hudVersion:Ks,renderedAt:Date.now(),line:n};ze(be(),JSON.stringify(r)+`
97
97
  `),ze(Xe(),n+`
98
- `)}catch{}}function ve(){try{b.unlinkSync(tr())}catch{}}function or(){let e=be();if(!b.existsSync(e))return null;try{return JSON.parse(b.readFileSync(e,"utf-8"))}catch{return null}}function eo(){if(process.env.JEST_WORKER_ID)return;let e=tr();try{if(b.mkdirSync($.dirname(e),{recursive:!0}),!io(e))return;let t=process.argv[1]?$.resolve(process.argv[1]):"";if(!t){ve();return}let n=(0,Qn.spawn)(process.execPath,[t,"shell-hud","refresh"],{detached:!0,stdio:"ignore",env:{...process.env,VISA_CLI_SHELL_HUD_BACKGROUND:"1"}});n.once("error",ve),n.unref()}catch{ve()}}function Rt(e){let t=Number(typeof e=="string"?e:e??0);return Number.isFinite(t)?t:0}function we(e){return e.replace(/\u001B\][^\u0007]*(?:\u0007|\u001B\\)/g,"").replace(/\u001B\[[0-?]*[ -/]*[@-~]/g,"").replace(/\u001B[P_^][^\u001B]*(?:\u001B\\|\u0007)/g,"").replace(/[\u0000-\u0008\u000B-\u001F\u007F-\u009F]/g,"").replace(/\s+/g," ").trim()}function to(e){let n=Math.round(Math.max(0,Math.min(1,e))*10),r="\u2588".repeat(n),s="\u2591".repeat(10-n);return`${U(r||"",L.green)}${U(s||"",L.dim)}`}function It(e){return`$${e.toFixed(2)}`}function no(e){let t=e.cards?.find(a=>a.isDefault)??e.cards?.[0];if(!t)return"card none";let n=typeof t.brand=="string"?t.brand:"card",r=typeof t.last4=="string"?t.last4:"????",s=we(n.toUpperCase()),o=we(r);return`${t.isDefault?"default":"active"} ${s} ****${o}`}function ro(){let e=(process.env.COLORTERM??"").toLowerCase();if(e==="truecolor"||e==="24bit")return!0;let t=(process.env.TERM??"").toLowerCase();return t.includes("truecolor")||t.includes("24bit")}var Lt=ro(),L={reset:"\x1B[0m",visaBlue:Lt?"\x1B[38;2;20;52;203m":"\x1B[38;5;27m",visaBlueSoft:Lt?"\x1B[38;2;97;126;229m":"\x1B[38;5;111m",visaGold:Lt?"\x1B[38;2;247;182;0m":"\x1B[38;5;220m",green:"\x1B[38;5;48m",dim:"\x1B[2m"};function U(e,t){return e.length===0||process.env.NO_COLOR?e:`${t}${e}${L.reset}`}function Zn(e){return e.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}function ir(){let e=Ye.homedir();if(!e||!$.isAbsolute(e))throw new Error("unable to determine a valid home directory");return $.resolve(e)}function so(e){return e==="powershell"?"& visa-cli shell-hud refresh":"visa-cli shell-hud refresh"}function oo(e){return e==="powershell"?"Get-Command visa-cli -ErrorAction SilentlyContinue -CommandType Application":"command -v visa-cli >/dev/null 2>&1"}function io(e){for(let t=0;t<2;t+=1){let n;try{return n=b.openSync(e,"wx"),b.writeFileSync(n,String(Date.now())),!0}catch(r){if(r?.code!=="EEXIST")return!1;try{let s=b.statSync(e);if(Date.now()-s.mtimeMs<=Ws)return!1;b.unlinkSync(e)}catch{}}finally{n!==void 0&&b.closeSync(n)}}return!1}function ar(e){return e instanceof Error?e.message:"unknown file system error"}function ze(e,t){b.mkdirSync($.dirname(e),{recursive:!0});let n=`${e}.${process.pid}.${Date.now()}.tmp`;b.writeFileSync(n,t),b.renameSync(n,e)}async function Ht(e,t){try{return await t()}catch(n){if(n.message==="Invalid signature"&&D()){ue.warn("attestation:key-mismatch",{action:"reregistering"});try{let r=await Ge();await e.registerAttestationKey(r),ue.info("attestation:key-reregistered")}catch(r){throw ue.error("attestation:reregister-failure",{error:r.message}),n}return await t()}throw n}}var cr="1.11.0-rc.3";function Vt(e,t){return t?{kind:"env",var:e}:{kind:"default"}}function ao(e,t,n){let r=process.env[e];if(r!==void 0&&r!=="")return{value:r,source:{kind:"env",var:e}};let s=wt(t);return s!==void 0?{value:s,source:{kind:"settings"}}:{value:n,source:{kind:"default"}}}function _e(e,t,n){let r=process.env[e];if(r!==void 0)return{value:n==="opt-in"?r==="true":r!=="false",source:{kind:"env",var:e}};let s=Ln(t);return s!==void 0?{value:s,source:{kind:"settings"}}:{value:n!=="opt-in",source:{kind:"default"}}}function H(e){return e==null?"\u2014":e?"yes":"no"}function et(e){return e==null?"\u2014":`$${e.toFixed(2)}`}async function lr(e){let t=null,n=null;try{t=await e.api.getStatus()}catch(C){n=C?.message||"unknown error"}let r=[],s=ao("VISA_AUTH_URL","auth.serverUrl","https://auth.visacli.sh");r.push({key:"auth.serverUrl",value:s.value,formatted:s.value,source:s.source,hint:s.source.kind==="default"?"Persist with `visa-cli config set auth.serverUrl <url>` (or set VISA_AUTH_URL for one-off overrides).":void 0}),r.push({key:"account.enrolled",value:t?.enrolled??null,formatted:H(t?.enrolled),source:t?{kind:"server"}:{kind:"unknown",reason:n||"offline"}}),t?.githubUser&&r.push({key:"account.githubUser",value:t.githubUser,formatted:t.githubUser,source:{kind:"server"}});let o=t?t.attestationRequired!==!1:void 0;r.push({key:"biometric.required",value:o,formatted:H(o),source:t?{kind:"server"}:{kind:"unknown",reason:n||"offline"},hint:o===!1?"Touch ID prompts are suppressed. Re-enable with `visa-cli biometric on`.":void 0}),r.push({key:"biometric.keyRegistered",value:t?.hasAttestationKey??null,formatted:H(t?.hasAttestationKey),source:t?{kind:"server"}:{kind:"unknown",reason:n||"offline"}}),r.push({key:"biometric.deviceAvailable",value:D(),formatted:H(D()),source:{kind:"device"}});let i=t?.spendingControls,a=i?i.max_transaction_amount??i.maxTransactionAmount??null:null,c=i?i.daily_limit??i.dailyLimit??null:null;r.push({key:"spending.maxPerTxn",value:a,formatted:et(a),source:t?{kind:"server"}:{kind:"unknown",reason:n||"offline"}}),r.push({key:"spending.dailyLimit",value:c,formatted:et(c),source:t?{kind:"server"}:{kind:"unknown",reason:n||"offline"}}),r.push({key:"spending.dailySpent",value:t?.dailySpent??null,formatted:et(t?.dailySpent),source:t?{kind:"server"}:{kind:"unknown",reason:n||"offline"}}),r.push({key:"spending.dailyRemaining",value:t?.dailyRemaining??null,formatted:et(t?.dailyRemaining),source:t?{kind:"server"}:{kind:"unknown",reason:n||"offline"}}),r.push({key:"cards.count",value:t?.cardCount??null,formatted:t?.cardCount!=null?String(t.cardCount):"\u2014",source:t?{kind:"server"}:{kind:"unknown",reason:n||"offline"}});let l=t?.cards?.find(C=>C.isDefault)??t?.cards?.[0];l&&r.push({key:"cards.default",value:{brand:l.brand??null,last4:l.last4},formatted:`${l.brand||"card"} \u2022\u2022\u2022\u2022 ${l.last4}`,source:{kind:"server"}});let u=_e("VISA_SUPPRESS_BROWSER","ui.suppressBrowser","opt-in");r.push({key:"ui.suppressBrowser",value:u.value,formatted:H(u.value),source:u.source,hint:"Persist with `visa-cli config set ui.suppressBrowser true` to stop auto-opening result URLs."});let f=_e("VISA_SUPPRESS_FEED","ui.suppressFeed","opt-in");r.push({key:"ui.suppressFeed",value:f.value,formatted:H(f.value),source:f.source});let y=J(),w;process.env.VISA_CLI_NO_UPDATE_CHECK?w={kind:"env",var:"VISA_CLI_NO_UPDATE_CHECK"}:process.env.CI?w={kind:"env",var:"CI"}:process.env.NODE_ENV==="test"?w={kind:"env",var:"NODE_ENV"}:w={kind:"default"},r.push({key:"ui.updateCheck",value:!y,formatted:H(!y),source:w});let d=_e("VISA_META_TOOLS","tools.meta","opt-out");r.push({key:"tools.meta",value:d.value,formatted:H(d.value),source:d.source,hint:"Persist with `visa-cli config set tools.meta false`. Restart Claude Code for changes to take effect."});let S=_e("VISA_SPECIFIC_TOOLS","tools.specific","opt-out");r.push({key:"tools.specific",value:S.value,formatted:H(S.value),source:S.source});let _=_e("VISA_DISCOVER_TOOLS","tools.discover","opt-out");if(r.push({key:"tools.discover",value:_.value,formatted:H(_.value),source:_.source}),r.push({key:"client.version",value:cr,formatted:cr,source:{kind:"default"}}),e.includeDev){let C=process.env.VISA_MOCK_KEYCHAIN;r.push({key:"dev.mockKeychain",value:C==="true",formatted:H(C==="true"),source:Vt("VISA_MOCK_KEYCHAIN",!!C)});let E=process.env.VISA_MOCK_TOUCHID;r.push({key:"dev.mockTouchid",value:E==="true",formatted:H(E==="true"),source:Vt("VISA_MOCK_TOUCHID",!!E)});let V=process.env.VISA_CLI_DEBUG;r.push({key:"dev.debug",value:!!V,formatted:H(!!V),source:Vt("VISA_CLI_DEBUG",!!V)})}return{entries:r,statusError:n}}function co(e){switch(e.kind){case"default":return"default";case"env":return`env ${e.var}`;case"settings":return"settings.json";case"server":return"server";case"device":return"device";case"unset":return"unset";case"unknown":return`unknown (${e.reason})`}}function ur(e,t={}){if(e.length===0)return"";let n=Math.max(...e.map(o=>o.key.length)),r=Math.max(...e.map(o=>o.formatted.length)),s=[];for(let o of e){let i=o.key.padEnd(n+2),a=o.formatted.padEnd(r+2);s.push(`${i}${a}(${co(o.source)})`),t.verbose&&o.hint&&s.push(` ${"\u21B3".padStart(n)} ${o.hint}`)}return s.join(`
98
+ `)}catch{}}function ve(){try{b.unlinkSync(tr())}catch{}}function or(){let e=be();if(!b.existsSync(e))return null;try{return JSON.parse(b.readFileSync(e,"utf-8"))}catch{return null}}function eo(){if(process.env.JEST_WORKER_ID)return;let e=tr();try{if(b.mkdirSync($.dirname(e),{recursive:!0}),!io(e))return;let t=process.argv[1]?$.resolve(process.argv[1]):"";if(!t){ve();return}let n=(0,Qn.spawn)(process.execPath,[t,"shell-hud","refresh"],{detached:!0,stdio:"ignore",env:{...process.env,VISA_CLI_SHELL_HUD_BACKGROUND:"1"}});n.once("error",ve),n.unref()}catch{ve()}}function Rt(e){let t=Number(typeof e=="string"?e:e??0);return Number.isFinite(t)?t:0}function we(e){return e.replace(/\u001B\][^\u0007]*(?:\u0007|\u001B\\)/g,"").replace(/\u001B\[[0-?]*[ -/]*[@-~]/g,"").replace(/\u001B[P_^][^\u001B]*(?:\u001B\\|\u0007)/g,"").replace(/[\u0000-\u0008\u000B-\u001F\u007F-\u009F]/g,"").replace(/\s+/g," ").trim()}function to(e){let n=Math.round(Math.max(0,Math.min(1,e))*10),r="\u2588".repeat(n),s="\u2591".repeat(10-n);return`${U(r||"",L.green)}${U(s||"",L.dim)}`}function It(e){return`$${e.toFixed(2)}`}function no(e){let t=e.cards?.find(a=>a.isDefault)??e.cards?.[0];if(!t)return"card none";let n=typeof t.brand=="string"?t.brand:"card",r=typeof t.last4=="string"?t.last4:"????",s=we(n.toUpperCase()),o=we(r);return`${t.isDefault?"default":"active"} ${s} ****${o}`}function ro(){let e=(process.env.COLORTERM??"").toLowerCase();if(e==="truecolor"||e==="24bit")return!0;let t=(process.env.TERM??"").toLowerCase();return t.includes("truecolor")||t.includes("24bit")}var Lt=ro(),L={reset:"\x1B[0m",visaBlue:Lt?"\x1B[38;2;20;52;203m":"\x1B[38;5;27m",visaBlueSoft:Lt?"\x1B[38;2;97;126;229m":"\x1B[38;5;111m",visaGold:Lt?"\x1B[38;2;247;182;0m":"\x1B[38;5;220m",green:"\x1B[38;5;48m",dim:"\x1B[2m"};function U(e,t){return e.length===0||process.env.NO_COLOR?e:`${t}${e}${L.reset}`}function Zn(e){return e.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}function ir(){let e=Ye.homedir();if(!e||!$.isAbsolute(e))throw new Error("unable to determine a valid home directory");return $.resolve(e)}function so(e){return e==="powershell"?"& visa-cli shell-hud refresh":"visa-cli shell-hud refresh"}function oo(e){return e==="powershell"?"Get-Command visa-cli -ErrorAction SilentlyContinue -CommandType Application":"command -v visa-cli >/dev/null 2>&1"}function io(e){for(let t=0;t<2;t+=1){let n;try{return n=b.openSync(e,"wx"),b.writeFileSync(n,String(Date.now())),!0}catch(r){if(r?.code!=="EEXIST")return!1;try{let s=b.statSync(e);if(Date.now()-s.mtimeMs<=Ws)return!1;b.unlinkSync(e)}catch{}}finally{n!==void 0&&b.closeSync(n)}}return!1}function ar(e){return e instanceof Error?e.message:"unknown file system error"}function ze(e,t){b.mkdirSync($.dirname(e),{recursive:!0});let n=`${e}.${process.pid}.${Date.now()}.tmp`;b.writeFileSync(n,t),b.renameSync(n,e)}async function Ht(e,t){try{return await t()}catch(n){if(n.message==="Invalid signature"&&D()){ue.warn("attestation:key-mismatch",{action:"reregistering"});try{let r=await Ge();await e.registerAttestationKey(r),ue.info("attestation:key-reregistered")}catch(r){throw ue.error("attestation:reregister-failure",{error:r.message}),n}return await t()}throw n}}var cr="1.11.0-rc.4";function Vt(e,t){return t?{kind:"env",var:e}:{kind:"default"}}function ao(e,t,n){let r=process.env[e];if(r!==void 0&&r!=="")return{value:r,source:{kind:"env",var:e}};let s=wt(t);return s!==void 0?{value:s,source:{kind:"settings"}}:{value:n,source:{kind:"default"}}}function _e(e,t,n){let r=process.env[e];if(r!==void 0)return{value:n==="opt-in"?r==="true":r!=="false",source:{kind:"env",var:e}};let s=Ln(t);return s!==void 0?{value:s,source:{kind:"settings"}}:{value:n!=="opt-in",source:{kind:"default"}}}function H(e){return e==null?"\u2014":e?"yes":"no"}function et(e){return e==null?"\u2014":`$${e.toFixed(2)}`}async function lr(e){let t=null,n=null;try{t=await e.api.getStatus()}catch(C){n=C?.message||"unknown error"}let r=[],s=ao("VISA_AUTH_URL","auth.serverUrl","https://auth.visacli.sh");r.push({key:"auth.serverUrl",value:s.value,formatted:s.value,source:s.source,hint:s.source.kind==="default"?"Persist with `visa-cli config set auth.serverUrl <url>` (or set VISA_AUTH_URL for one-off overrides).":void 0}),r.push({key:"account.enrolled",value:t?.enrolled??null,formatted:H(t?.enrolled),source:t?{kind:"server"}:{kind:"unknown",reason:n||"offline"}}),t?.githubUser&&r.push({key:"account.githubUser",value:t.githubUser,formatted:t.githubUser,source:{kind:"server"}});let o=t?t.attestationRequired!==!1:void 0;r.push({key:"biometric.required",value:o,formatted:H(o),source:t?{kind:"server"}:{kind:"unknown",reason:n||"offline"},hint:o===!1?"Touch ID prompts are suppressed. Re-enable with `visa-cli biometric on`.":void 0}),r.push({key:"biometric.keyRegistered",value:t?.hasAttestationKey??null,formatted:H(t?.hasAttestationKey),source:t?{kind:"server"}:{kind:"unknown",reason:n||"offline"}}),r.push({key:"biometric.deviceAvailable",value:D(),formatted:H(D()),source:{kind:"device"}});let i=t?.spendingControls,a=i?i.max_transaction_amount??i.maxTransactionAmount??null:null,c=i?i.daily_limit??i.dailyLimit??null:null;r.push({key:"spending.maxPerTxn",value:a,formatted:et(a),source:t?{kind:"server"}:{kind:"unknown",reason:n||"offline"}}),r.push({key:"spending.dailyLimit",value:c,formatted:et(c),source:t?{kind:"server"}:{kind:"unknown",reason:n||"offline"}}),r.push({key:"spending.dailySpent",value:t?.dailySpent??null,formatted:et(t?.dailySpent),source:t?{kind:"server"}:{kind:"unknown",reason:n||"offline"}}),r.push({key:"spending.dailyRemaining",value:t?.dailyRemaining??null,formatted:et(t?.dailyRemaining),source:t?{kind:"server"}:{kind:"unknown",reason:n||"offline"}}),r.push({key:"cards.count",value:t?.cardCount??null,formatted:t?.cardCount!=null?String(t.cardCount):"\u2014",source:t?{kind:"server"}:{kind:"unknown",reason:n||"offline"}});let l=t?.cards?.find(C=>C.isDefault)??t?.cards?.[0];l&&r.push({key:"cards.default",value:{brand:l.brand??null,last4:l.last4},formatted:`${l.brand||"card"} \u2022\u2022\u2022\u2022 ${l.last4}`,source:{kind:"server"}});let u=_e("VISA_SUPPRESS_BROWSER","ui.suppressBrowser","opt-in");r.push({key:"ui.suppressBrowser",value:u.value,formatted:H(u.value),source:u.source,hint:"Persist with `visa-cli config set ui.suppressBrowser true` to stop auto-opening result URLs."});let f=_e("VISA_SUPPRESS_FEED","ui.suppressFeed","opt-in");r.push({key:"ui.suppressFeed",value:f.value,formatted:H(f.value),source:f.source});let y=J(),w;process.env.VISA_CLI_NO_UPDATE_CHECK?w={kind:"env",var:"VISA_CLI_NO_UPDATE_CHECK"}:process.env.CI?w={kind:"env",var:"CI"}:process.env.NODE_ENV==="test"?w={kind:"env",var:"NODE_ENV"}:w={kind:"default"},r.push({key:"ui.updateCheck",value:!y,formatted:H(!y),source:w});let d=_e("VISA_META_TOOLS","tools.meta","opt-out");r.push({key:"tools.meta",value:d.value,formatted:H(d.value),source:d.source,hint:"Persist with `visa-cli config set tools.meta false`. Restart Claude Code for changes to take effect."});let S=_e("VISA_SPECIFIC_TOOLS","tools.specific","opt-out");r.push({key:"tools.specific",value:S.value,formatted:H(S.value),source:S.source});let _=_e("VISA_DISCOVER_TOOLS","tools.discover","opt-out");if(r.push({key:"tools.discover",value:_.value,formatted:H(_.value),source:_.source}),r.push({key:"client.version",value:cr,formatted:cr,source:{kind:"default"}}),e.includeDev){let C=process.env.VISA_MOCK_KEYCHAIN;r.push({key:"dev.mockKeychain",value:C==="true",formatted:H(C==="true"),source:Vt("VISA_MOCK_KEYCHAIN",!!C)});let E=process.env.VISA_MOCK_TOUCHID;r.push({key:"dev.mockTouchid",value:E==="true",formatted:H(E==="true"),source:Vt("VISA_MOCK_TOUCHID",!!E)});let V=process.env.VISA_CLI_DEBUG;r.push({key:"dev.debug",value:!!V,formatted:H(!!V),source:Vt("VISA_CLI_DEBUG",!!V)})}return{entries:r,statusError:n}}function co(e){switch(e.kind){case"default":return"default";case"env":return`env ${e.var}`;case"settings":return"settings.json";case"server":return"server";case"device":return"device";case"unset":return"unset";case"unknown":return`unknown (${e.reason})`}}function ur(e,t={}){if(e.length===0)return"";let n=Math.max(...e.map(o=>o.key.length)),r=Math.max(...e.map(o=>o.formatted.length)),s=[];for(let o of e){let i=o.key.padEnd(n+2),a=o.formatted.padEnd(r+2);s.push(`${i}${a}(${co(o.source)})`),t.verbose&&o.hint&&s.push(` ${"\u21B3".padStart(n)} ${o.hint}`)}return s.join(`
99
99
  `)}function dr(e){return JSON.stringify({config:e.entries.map(t=>({key:t.key,value:t.value,source:t.source,hint:t.hint})),statusError:e.statusError},null,2)}var j=class extends Error{constructor(t){super(t),this.name="PayValidationError"}},fr=["GET","POST"];function pr(e){let t;try{t=new URL(e)}catch{throw new j(`Invalid URL: ${e}. Expected a fully-qualified http(s) URL.`)}if(t.protocol!=="http:"&&t.protocol!=="https:")throw new j(`Unsupported URL scheme "${t.protocol}". Only http and https are allowed.`);return t}function gr(e){let t=(e??"GET").toUpperCase();if(!fr.includes(t))throw new j(`Unsupported HTTP method "${e}". Supported: ${fr.join(", ")}.`);return t}function mr(e){if(e!==void 0){try{JSON.parse(e)}catch(t){throw new j(`--body is not valid JSON: ${t?.message??"parse error"}`)}return e}}function hr(e){if(!e||typeof e!="object")throw new j("Merchant returned no payment preview.");let t=e;if(typeof t.amount!="number"||!Number.isFinite(t.amount)||t.amount<=0)throw new j("Could not determine payment amount from merchant.");if(typeof t.merchantName!="string"||t.merchantName.trim().length===0)throw new j("Merchant returned an empty merchant name.");if(t.merchantName.length>200)throw new j(`Merchant name too long (${t.merchantName.length} chars).`);if(typeof t.currency!="string"||t.currency.trim().length===0)throw new j("Merchant returned an empty currency.");if(t.currency.length>10)throw new j(`Currency code too long (${t.currency.length} chars).`);return{amount:t.amount,currency:t.currency,merchantName:t.merchantName}}var v=h(require("fs")),g=h(require("path")),yr=h(require("os")),k=yr.homedir(),lo=["Claude_","Anthropic.ClaudeDesktop_"],pe=class extends Error{constructor(n,r,s){super(fo(n,r,s));this.client=n;this.configPath=r;this.name="McpConfigAccessError"}client;configPath};function Sr(e){let t=e;return[t?.message,t?.stderr].filter(n=>typeof n=="string").join(`
100
100
  `)}function uo(e){let t=e;if(t?.code==="EPERM"||t?.code==="EACCES")return!0;let n=Sr(e).toLowerCase();return n.includes("operation not permitted")||n.includes("permission denied")}function fo(e,t,n){let r=t.replace(k,"~"),s=Sr(n).split(`
101
101
  `).find(Boolean),o=s?` (${s})`:"";return e.id==="codex"?`Could not update Codex MCP config at ${r}: filesystem access was denied${o}. In Codex, rerun with elevated filesystem access or run \`visa-cli install codex\` outside the sandbox.`:`Could not update ${e.displayName} MCP config at ${r}: filesystem access was denied${o}.`}function Ce(){return process.env.APPDATA||g.join(k,"AppData","Roaming")}function po(){return process.env.LOCALAPPDATA||g.join(k,"AppData","Local")}function Ft(e){return process.platform==="win32"?e.win32:e.posix}function vr(){if(process.platform!=="win32")return;let e=g.join(po(),"Packages");if(v.existsSync(e))try{let t=v.readdirSync(e,"utf-8");for(let n of lo){let r=t.filter(s=>s.startsWith(n)).sort()[0];if(r)return g.join(e,r,"LocalCache","Roaming","Claude")}}catch{return}}function br(){if(process.platform==="win32"){let e=vr();return e?g.join(e,"claude_desktop_config.json"):g.join(Ce(),"Claude","claude_desktop_config.json")}return g.join(k,"Library","Application Support","Claude","claude_desktop_config.json")}function wr(){if(process.platform!=="win32")return[g.join(k,"Library","Application Support","Claude")];let e=[g.join(Ce(),"Claude")],t=vr();return t&&e.push(t),e}function tt(e){return e.id==="claude-desktop"?br():e.globalConfigPath}function go(e){return e.id==="claude-desktop"?wr():e.detectPaths}var q=[{id:"claude",displayName:"Claude Code",globalConfigPath:g.join(k,".claude.json"),configKey:"mcpServers",detectPaths:[g.join(k,".claude.json")],postInstallHint:"Restart Claude Code or run /mcp to connect."},{id:"claude-desktop",displayName:"Claude Desktop",globalConfigPath:br(),configKey:"mcpServers",detectPaths:wr(),postInstallHint:"Restart the Claude desktop app to connect."},{id:"cursor",displayName:"Cursor",globalConfigPath:g.join(k,".cursor","mcp.json"),configKey:"mcpServers",detectPaths:[g.join(k,".cursor")],postInstallHint:"Restart Cursor to connect."},{id:"windsurf",displayName:"Windsurf",globalConfigPath:g.join(k,".codeium","windsurf","mcp_config.json"),configKey:"mcpServers",detectPaths:[g.join(k,".codeium","windsurf")],postInstallHint:"Restart Windsurf to connect."},{id:"cline",displayName:"Cline",globalConfigPath:g.join(k,".vscode","mcp.json"),configKey:"mcpServers",detectPaths:[g.join(k,".vscode","extensions","saoudrizwan.claude-dev-*")],postInstallHint:"Restart VS Code to connect."},{id:"roo-code",displayName:"Roo Code",globalConfigPath:Ft({win32:g.join(Ce(),"Roo","mcp_settings.json"),posix:g.join(k,".config","Roo","mcp_settings.json")}),configKey:"mcpServers",detectPaths:[g.join(k,".vscode","extensions","RooVeterinaryInc.roo-cline-*")],postInstallHint:"Restart VS Code to connect."},{id:"copilot",displayName:"VS Code Copilot",globalConfigPath:g.join(k,".vscode","mcp.json"),configKey:"servers",detectPaths:[g.join(k,".vscode")],postInstallHint:"Restart VS Code to connect."},{id:"zed",displayName:"Zed",globalConfigPath:Ft({win32:g.join(Ce(),"Zed","settings.json"),posix:g.join(k,".config","zed","settings.json")}),configKey:"context_servers",detectPaths:Ft({win32:[g.join(Ce(),"Zed")],posix:[g.join(k,".config","zed")]}),postInstallHint:"Restart Zed to connect.",buildEntry:e=>({source:"custom",...e})},{id:"codex",displayName:"Codex",globalConfigPath:g.join(k,".codex","config.toml"),configKey:"mcp_servers",configFormat:"toml",detectPaths:[g.join(k,".codex")],postInstallHint:"Restart Codex to connect. For the terminal HUD, run: visa-cli hud enable codex"}];function Bt(e){return q.find(t=>t.id===e)}function ke(e){return go(e).some(t=>{if(t.includes("*")){let n=g.dirname(t),r=g.basename(t).replaceAll("*","");if(!v.existsSync(n))return!1;try{return v.readdirSync(n).some(s=>s.startsWith(r))}catch{return!1}}return v.existsSync(t)})}function _r(){return{command:"node",args:[g.resolve(__dirname,"mcp-server/index.js")]}}function Kt(e,t){return t==="project"?"json":e.configFormat??"json"}function mo(e){if(e=e.trim(),e==="true")return!0;if(e==="false")return!1;if(e.startsWith('"')&&e.endsWith('"'))return e.slice(1,-1);if(e.startsWith("[")&&e.endsWith("]")){let n=e.slice(1,-1).trim();return n.length===0?[]:n.split(",").map(r=>r.trim()).filter(Boolean).map(r=>r.startsWith('"')&&r.endsWith('"')?r.slice(1,-1):r)}let t=Number(e);return isNaN(t)?e:t}function qt(e,t){let n=`[mcp_servers.${t}]`,r=e.findIndex(o=>o.trim()===n);if(r===-1)return;let s=r+1;for(;s<e.length&&!e[s].trim().startsWith("[");)s++;return{start:r,end:s}}function Gt(e,t){let n=e.split(`
@@ -1,9 +1,9 @@
1
1
  #!/usr/bin/env node
2
- "use strict";var mr=Object.create;var it=Object.defineProperty;var pr=Object.getOwnPropertyDescriptor;var fr=Object.getOwnPropertyNames;var gr=Object.getPrototypeOf,hr=Object.prototype.hasOwnProperty;var yr=(r,e)=>()=>(e||r((e={exports:{}}).exports,e),e.exports);var _r=(r,e,t,n)=>{if(e&&typeof e=="object"||typeof e=="function")for(let s of fr(e))!hr.call(r,s)&&s!==t&&it(r,s,{get:()=>e[s],enumerable:!(n=pr(e,s))||n.enumerable});return r};var f=(r,e,t)=>(t=r!=null?mr(gr(r)):{},_r(e||!r||!r.__esModule?it(t,"default",{value:r,enumerable:!0}):t,r));var tr=yr((Qs,Jn)=>{Jn.exports={name:"@visa/cli",version:"1.11.0-rc.3",description:"AI-powered payments for Claude Code",bin:{"visa-cli":"./bin/visa-cli.js"},scripts:{build:"tsc --noEmit && node esbuild.config.js",dev:"tsc --watch",pretest:"pnpm build",start:"node dist/mcp-server/index.js",test:"jest --config jest.config.js","test:unit":"jest --config jest.config.js","test:unit:watch":"jest --config jest.config.js --watch","test:unit:coverage":"jest --config jest.config.js --coverage","test:smoke":"VISA_AUTH_URL=https://auth.visacli.sh jest --config jest.smoke.config.js","test:integration":"jest --config jest.integration.config.js","test:e2e":"jest --config jest.e2e.config.js","test:catalog-e2e":"jest --config jest.catalog-e2e.config.js","test:all":"npm run test:unit && npm run test:integration && npm run test:e2e",prepublishOnly:"npm run build && npm test",lint:"eslint src/**/*.ts",format:'prettier --write "src/**/*.ts"',"format:check":'prettier --check "src/**/*.ts"'},keywords:["visa","checkout","mcp","ai-agent","payments","click-to-pay","usdc","stablecoin"],author:"Visa Crypto Labs",license:"SEE LICENSE IN LICENSE",dependencies:{"@modelcontextprotocol/sdk":"^1.0.0",commander:"^12.1.0",zod:"^3.23.0"},devDependencies:{"@visa-cli/tools":"workspace:*","@changesets/changelog-git":"^0.2.1","@changesets/cli":"^2.31.0","@types/jest":"^30.0.0","@types/node":"^25.6.0","@typescript-eslint/eslint-plugin":"^8.59.0","@typescript-eslint/parser":"^8.59.0","@types/express":"^5.0.0",esbuild:"^0.27.4",express:"^4.21.0",eslint:"^10.0.2","eslint-config-prettier":"^10.1.8",jest:"^29.7.0",prettier:"^3.8.3","ts-jest":"^29.2.0",typescript:"^5.7.0"},engines:{node:">=18.0.0"},mcpName:"io.github.visa-crypto-labs/visa-cli",files:["bin/visa-cli.js","dist/","install.ps1","native/visa-keychain.m","server.json","README.md","LICENSE"]}});var ir=require("@modelcontextprotocol/sdk/server/index.js"),ar=require("@modelcontextprotocol/sdk/server/stdio.js"),V=require("@modelcontextprotocol/sdk/types.js");async function at(r,e){let t=e?.timeoutMs??3e4,n=new AbortController,s=setTimeout(()=>n.abort(),t);try{let{timeoutMs:o,...i}=e??{};return await fetch(r,{...i,signal:n.signal})}finally{clearTimeout(s)}}var b=class extends Error{retryable;code;reason;constructor(e,t,n,s){super(e),this.name="CardDeclinedError",this.retryable=t,this.code=n,this.reason=s}};var wr=/^(\d+)\.(\d+)\.(\d+)(?:-([0-9A-Za-z.-]+))?(?:\+[0-9A-Za-z.-]+)?$/;function ut(r,e){let t=ct(r),n=ct(e);if(!t||!n)return!1;for(let s=0;s<3;s++)if(t.main[s]!==n.main[s])return t.main[s]>n.main[s];return t.pre&&!n.pre?!1:!t.pre&&n.pre?!0:!t.pre&&!n.pre?!1:br(t.pre,n.pre)>0}function ct(r){if(typeof r!="string")return null;let t=r.trim().replace(/^v/,"").match(wr);return t?{main:[Number(t[1]),Number(t[2]),Number(t[3])],pre:t[4]??null}:null}function br(r,e){let t=r.split("."),n=e.split("."),s=Math.max(t.length,n.length);for(let o=0;o<s;o++){if(o>=t.length)return-1;if(o>=n.length)return 1;let i=t[o],u=n[o],l=/^\d+$/.test(i),c=/^\d+$/.test(u);if(l&&c){let p=Number(i)-Number(u);if(p!==0)return p}else{if(l)return-1;if(c)return 1;if(i<u)return-1;if(i>u)return 1}}return 0}function ye(){return!!(lt(process.env.VISA_CLI_NO_UPDATE_CHECK)||lt(process.env.CI)||process.env.NODE_ENV==="test")}function lt(r){if(r===void 0)return!1;let e=r.trim().toLowerCase();return!(e===""||e==="0"||e==="false"||e==="no"||e==="off")}var B=f(require("fs")),pt=f(require("path"));var _e=f(require("fs")),dt=f(require("path")),mt=f(require("os"));var He=dt.join(mt.homedir(),".visa-mcp"),U=class{static ensureConfigDir(){_e.existsSync(He)||_e.mkdirSync(He,{recursive:!0,mode:448})}static getConfigDir(){return He}static TOOL_STATES={login:!0,get_status:!0,get_cards:!0,add_card:!0,pay:!0,transaction_history:!0,update_spending_controls:!0,enroll_device:!1,verify_otp:!1,reset:!0,batch:!0,generate_x402_image:!1,browser_launch:!1,browser_navigate:!1,browser_snapshot:!1,browser_click:!1,browser_type:!1,browser_scroll:!1,generate_music_card:!1,generate_image_card:!0,query_onchain_prices_card:!0,generate_music_tempo_card:!0,check_music_status_tempo_card:!0,generate_image_fast_card:!0,pxlwall_card:!1,generate_video_tempo_card:!0};static loadToolStates(){return{...this.TOOL_STATES}}static getDisabledTools(){let e=new Set;for(let[t,n]of Object.entries(this.TOOL_STATES))n||e.add(t);return e}static isToolDisabled(e){return this.TOOL_STATES[e]===!1}};var vr="settings.json";function we(){return pt.join(U.getConfigDir(),vr)}var re={"auth.serverUrl":{type:"string",description:"Auth server base URL. Override for staging / self-hosted backends.",requiresRestart:!0,validate:r=>{if(typeof r!="string")throw new Error("auth.serverUrl must be a string");let e;try{e=new URL(r)}catch{throw new Error(`auth.serverUrl must be a valid URL (got: ${JSON.stringify(r)})`)}if(e.protocol!=="https:"&&e.protocol!=="http:")throw new Error(`auth.serverUrl must use http or https (got: ${e.protocol})`)}},"ui.suppressBrowser":{type:"boolean",description:"When true, the CLI/MCP server stops auto-opening result URLs in your browser."},"ui.suppressFeed":{type:"boolean",description:"When true, generated images/music are not auto-submitted to the public Made-with-Visa feed."},"tools.meta":{type:"boolean",description:"Show category meta-tools (generate_image, generate_music, ...). Restart required.",requiresRestart:!0},"tools.specific":{type:"boolean",description:"Show hardcoded per-merchant tools (generate_image_card, query_onchain_prices_card, ...). Restart required.",requiresRestart:!0},"tools.discover":{type:"boolean",description:"Show the dynamic-catalog tools (discover_tools, execute_tool). Restart required.",requiresRestart:!0}};function be(){let r=we();if(!B.existsSync(r))return{};try{let e=B.readFileSync(r,"utf-8"),t=JSON.parse(e);return!t||typeof t!="object"||Array.isArray(t)?{}:t}catch{return{}}}function ft(r){U.ensureConfigDir();let e=we(),t=`${e}.tmp`,n=JSON.stringify(r,null,2)+`
3
- `;B.writeFileSync(t,n,{mode:384}),B.renameSync(t,e)}function je(r){let e=be()[r];return typeof e=="string"?e:void 0}function z(r){let e=be()[r];if(typeof e=="boolean")return e;if(e==="true")return!0;if(e==="false")return!1}var J=class extends Error{constructor(e){let t=Object.keys(re).sort().join(", ");super(`Unknown setting "${e}". Settable keys: ${t}. For server-controlled values (biometric.*, spending.*) use the dedicated tools (biometric_on/off, update_spending_controls).`),this.name="UnknownSettingKeyError"}},Y=class extends Error{constructor(e){let t="";e.startsWith("biometric.")?t="biometric_on / biometric_off":e.startsWith("spending.")?t="update_spending_controls":e.startsWith("cards.")?t="add_card / remove_card / set_default_card":e.startsWith("account.")&&(t="login / reset"),super(`"${e}" is a server-controlled value and cannot be set via config set. `+(t?`Use ${t} instead.`:"No client-side override is supported.")),this.name="ServerOnlySettingError"}},gt=["biometric.","spending.","account.","cards.","biometric"];function ht(r,e){if(gt.some(o=>r.startsWith(o)))throw new Y(r);let t=re[r];if(!t)throw new J(r);let n;if(t.type==="boolean")if(typeof e=="boolean")n=e;else if(typeof e=="string"){let o=e.toLowerCase();if(o==="true")n=!0;else if(o==="false")n=!1;else throw new Error(`${r} expects true or false (got: ${JSON.stringify(e)})`)}else throw new Error(`${r} expects a boolean (got: ${typeof e})`);else{if(typeof e!="string"||e.length===0)throw new Error(`${r} expects a non-empty string`);n=e}t.validate&&t.validate(n);let s=be();return s[r]=n,ft(s),{key:r,value:n,requiresRestart:!!t.requiresRestart,path:we()}}function yt(r){if(gt.some(s=>r.startsWith(s)))throw new Y(r);let e=re[r];if(!e)throw new J(r);let t=be(),n=r in t;return n&&(delete t[r],ft(t)),{key:r,removed:n,requiresRestart:n&&!!e.requiresRestart,path:we()}}var Sr="https://auth.visacli.sh";function ve(){let r=process.env.VISA_AUTH_URL;if(r!==void 0&&r!=="")return r;let e=je("auth.serverUrl");return e!==void 0?e:Sr}function _t(){let r=process.env.VISA_SUPPRESS_BROWSER;return r!==void 0?r==="true":z("ui.suppressBrowser")??!1}function wt(){let r=process.env.VISA_SUPPRESS_FEED;return r!==void 0?r==="true":z("ui.suppressFeed")??!1}function ne(){let r=process.env.VISA_META_TOOLS;return r!==void 0?r!=="false":z("tools.meta")??!0}function se(){let r=process.env.VISA_SPECIFIC_TOOLS;return r!==void 0?r!=="false":z("tools.specific")??!0}function oe(){let r=process.env.VISA_DISCOVER_TOOLS;return r!==void 0?r!=="false":z("tools.discover")??!0}var Ve="1.11.0-rc.3",Se=class{constructor(e){this.getSessionToken=e;this.baseUrl=ve()}getSessionToken;baseUrl;lastSignals={};parseServerSignals(e){if(this.lastSignals={},!ye()){let n=e.headers.get("X-Latest-Version"),s=e.headers.get("X-Update-Message");n&&ut(n,Ve)&&(this.lastSignals.updateAvailable={version:n,message:s||`Update available: v${n}. Run: npm install -g @visa/cli && visa-cli setup`})}let t=e.headers.get("X-Feedback-Prompt");if(t)try{this.lastSignals.feedbackPrompt=JSON.parse(t)}catch{}}getClientVersion(){return Ve}async request(e,t,n,s,o){let i=await this.getSessionToken();if(!i)throw new Error("Not logged in. Sign up at https://visacli.sh or run: visa-cli setup");let u={Authorization:`Bearer ${i}`};o&&(e==="GET"?u["X-User-Context"]=o.replace(/[\r\n\0]/g," ").slice(0,1e3):n={...n||{},user_context:o}),n&&(u["Content-Type"]="application/json");let l;try{l=await at(`${this.baseUrl}${t}`,{method:e,headers:{...u,"X-Visa-CLI-Version":Ve},body:n?JSON.stringify(n):void 0,timeoutMs:s})}catch(p){throw p.name==="AbortError"||p.message?.includes("aborted")?new Error("The request timed out. The server may be under heavy load. Please try again."):new Error("Cannot reach the Visa CLI server. Check your internet connection and try again.")}if(this.parseServerSignals(l),l.status===401)throw new Error("Your session has expired. Run: visa-cli setup");if(l.status===429){let p=l.headers.get("Retry-After")||"3";throw new Error(`Rate limited \u2014 wait ${p}s. Tip: use the batch tool to combine multiple requests into one.`)}if(l.status===503)throw new Error("Visa CLI is temporarily unavailable. Check https://visacli.sh for status.");let c;try{c=await l.json()}catch{throw l.status===500?new Error(`Server error on ${t}. Try again or check https://visacli.sh for status.`):new Error(`Unexpected response from ${t}. Try again.`)}if(!l.ok)throw l.status===500?new Error(`Server error on ${t}. Try again or check https://visacli.sh for status.`):c?.declined?new b(c.error||"Your card was declined.",!!c.retryable,c.code,c.reason):new Error(c?.error||`Request failed (${l.status}). Try again.`);return c}async pay(e,t){return this.request("POST","/v1/pay",e,void 0,t)}async shortcut(e,t,n,s){return this.request("POST",`/v1/shortcuts/${encodeURIComponent(e)}`,t,n,s)}async batch(e,t,n){return this.request("POST","/v1/batch",e,t,n)}async catalogSearch(e,t){let n=new URLSearchParams;e&&n.set("q",e),t&&n.set("category",t);let s=n.toString();return this.request("GET",`/v1/catalog${s?`?${s}`:""}`)}async catalogTool(e){try{return await this.request("GET",`/v1/catalog/${encodeURIComponent(e)}`)}catch{return null}}async paymentPreview(e,t){return this.request("POST","/v1/payment-preview",e,void 0,t)}async getStatus(e){return this.request("GET","/v1/status",void 0,void 0,e)}async getTransactions(e){return this.request("GET","/v1/transactions",void 0,void 0,e)}async updateSpendingControls(e,t){return this.request("POST","/v1/spending-controls",e,void 0,t)}async removeCard(e,t,n){return this.request("DELETE",`/v1/cards/${encodeURIComponent(String(e))}`,t,void 0,n)}async setDefaultCard(e,t,n){return this.request("POST",`/v1/cards/${encodeURIComponent(String(e))}/default`,t,void 0,n)}async getAttestationChallenge(){return this.request("GET","/v1/attestation-challenge")}async registerAttestationKey(e){return this.request("POST","/v1/attestation-key",{publicKey:e})}async setBiometricPreference(e,t){return this.request("POST","/v1/biometric-preference",{...e,confirm:!0},void 0,t)}async logout(e,t){return this.request("POST","/v1/logout",e,void 0,t)}async feedback(e,t,n){return this.request("POST","/v1/feedback",{message:e,...t&&{transaction_id:t}},void 0,n)}async createAppApiKey(e){return this.request("POST","/v1/api/keys",e)}async listAppApiKeys(){return this.request("GET","/v1/api/keys")}async revokeAppApiKey(e){return this.request("DELETE",`/v1/api/keys/${encodeURIComponent(String(e))}`)}async feedSubmit(e){return this.request("POST","/v1/feed",e)}async feedList(e){let t=new URLSearchParams;e?.tab&&t.set("tab",e.tab),e?.limit&&t.set("limit",String(e.limit)),e?.offset&&t.set("offset",String(e.offset));let n=t.toString();return this.request("GET",`/v1/feed${n?"?"+n:""}`)}async feedVote(e,t){return this.request("POST",`/v1/feed/${encodeURIComponent(e)}/vote`,{direction:t})}async feedApprove(e){return this.request("POST",`/v1/feed/${encodeURIComponent(e)}/approve`)}async feedDelete(e){return this.request("DELETE",`/v1/feed/${encodeURIComponent(e)}`)}async feedPending(){return this.request("GET","/v1/feed/pending")}async submitFeedback(e,t,n){return this.request("POST","/v1/feedback",{message:e,...t&&{transaction_id:t}},void 0,n)}async getFeedback(e,t){let n=new URLSearchParams;e&&n.set("limit",String(e));let s=n.toString();return this.request("GET",`/v1/feedback${s?"?"+s:""}`,void 0,void 0,t)}async submitRatedFeedback(e){return this.request("POST","/v1/feedback",e)}};var Ge=require("child_process"),Et=require("util"),xt=f(require("crypto")),k=f(require("fs")),Rt=f(require("os")),D=f(require("path"));var R=f(require("fs")),Be=f(require("path")),bt=f(require("os")),Ke=Be.join(bt.homedir(),".visa-mcp"),ae=Be.join(Ke,"mcp-server.log"),kr=5*1024*1024,Fe=null;function Tr(){R.existsSync(Ke)||R.mkdirSync(Ke,{recursive:!0,mode:448})}function Er(){if(!Fe){if(Tr(),R.existsSync(ae)&&R.statSync(ae).size>kr){let e=ae+".1";R.existsSync(e)&&R.unlinkSync(e),R.renameSync(ae,e)}Fe=R.createWriteStream(ae,{flags:"a"})}return Fe}function ke(r,...e){let t=new Date().toISOString(),n=e.map(o=>typeof o=="string"?o:JSON.stringify(o,null,2)).join(" "),s=`[${t}] [${r}] ${n}
2
+ "use strict";var mr=Object.create;var it=Object.defineProperty;var pr=Object.getOwnPropertyDescriptor;var fr=Object.getOwnPropertyNames;var gr=Object.getPrototypeOf,hr=Object.prototype.hasOwnProperty;var yr=(r,e)=>()=>(e||r((e={exports:{}}).exports,e),e.exports);var _r=(r,e,t,n)=>{if(e&&typeof e=="object"||typeof e=="function")for(let s of fr(e))!hr.call(r,s)&&s!==t&&it(r,s,{get:()=>e[s],enumerable:!(n=pr(e,s))||n.enumerable});return r};var f=(r,e,t)=>(t=r!=null?mr(gr(r)):{},_r(e||!r||!r.__esModule?it(t,"default",{value:r,enumerable:!0}):t,r));var tr=yr((Qs,Jn)=>{Jn.exports={name:"@visa/cli",version:"1.11.0-rc.4",description:"AI-powered payments for Claude Code",bin:{"visa-cli":"./bin/visa-cli.js"},scripts:{build:"tsc --noEmit && node esbuild.config.js",dev:"tsc --watch",pretest:"pnpm build",start:"node dist/mcp-server/index.js",test:"jest --config jest.config.js","test:unit":"jest --config jest.config.js","test:unit:watch":"jest --config jest.config.js --watch","test:unit:coverage":"jest --config jest.config.js --coverage","test:smoke":"VISA_AUTH_URL=https://auth.visacli.sh jest --config jest.smoke.config.js","test:integration":"jest --config jest.integration.config.js","test:e2e":"jest --config jest.e2e.config.js","test:catalog-e2e":"jest --config jest.catalog-e2e.config.js","test:all":"npm run test:unit && npm run test:integration && npm run test:e2e",prepublishOnly:"npm run build && npm test",lint:"eslint src/**/*.ts",format:'prettier --write "src/**/*.ts"',"format:check":'prettier --check "src/**/*.ts"'},keywords:["visa","checkout","mcp","ai-agent","payments","click-to-pay","usdc","stablecoin"],author:"Visa Crypto Labs",license:"SEE LICENSE IN LICENSE",dependencies:{"@modelcontextprotocol/sdk":"^1.0.0",commander:"^12.1.0",zod:"^3.23.0"},devDependencies:{"@visa-cli/tools":"workspace:*","@changesets/changelog-git":"^0.2.1","@changesets/cli":"^2.31.0","@types/jest":"^30.0.0","@types/node":"^25.6.0","@typescript-eslint/eslint-plugin":"^8.59.0","@typescript-eslint/parser":"^8.59.0","@types/express":"^5.0.0",esbuild:"^0.27.4",express:"^4.21.0",eslint:"^10.0.2","eslint-config-prettier":"^10.1.8",jest:"^29.7.0",prettier:"^3.8.3","ts-jest":"^29.2.0",typescript:"^5.7.0"},engines:{node:">=18.0.0"},mcpName:"io.github.visa-crypto-labs/visa-cli",files:["bin/visa-cli.js","dist/","install.ps1","native/visa-keychain.m","server.json","README.md","LICENSE"]}});var ir=require("@modelcontextprotocol/sdk/server/index.js"),ar=require("@modelcontextprotocol/sdk/server/stdio.js"),V=require("@modelcontextprotocol/sdk/types.js");async function at(r,e){let t=e?.timeoutMs??3e4,n=new AbortController,s=setTimeout(()=>n.abort(),t);try{let{timeoutMs:o,...i}=e??{};return await fetch(r,{...i,signal:n.signal})}finally{clearTimeout(s)}}var b=class extends Error{retryable;code;reason;constructor(e,t,n,s){super(e),this.name="CardDeclinedError",this.retryable=t,this.code=n,this.reason=s}};var wr=/^(\d+)\.(\d+)\.(\d+)(?:-([0-9A-Za-z.-]+))?(?:\+[0-9A-Za-z.-]+)?$/;function ut(r,e){let t=ct(r),n=ct(e);if(!t||!n)return!1;for(let s=0;s<3;s++)if(t.main[s]!==n.main[s])return t.main[s]>n.main[s];return t.pre&&!n.pre?!1:!t.pre&&n.pre?!0:!t.pre&&!n.pre?!1:br(t.pre,n.pre)>0}function ct(r){if(typeof r!="string")return null;let t=r.trim().replace(/^v/,"").match(wr);return t?{main:[Number(t[1]),Number(t[2]),Number(t[3])],pre:t[4]??null}:null}function br(r,e){let t=r.split("."),n=e.split("."),s=Math.max(t.length,n.length);for(let o=0;o<s;o++){if(o>=t.length)return-1;if(o>=n.length)return 1;let i=t[o],u=n[o],l=/^\d+$/.test(i),c=/^\d+$/.test(u);if(l&&c){let p=Number(i)-Number(u);if(p!==0)return p}else{if(l)return-1;if(c)return 1;if(i<u)return-1;if(i>u)return 1}}return 0}function ye(){return!!(lt(process.env.VISA_CLI_NO_UPDATE_CHECK)||lt(process.env.CI)||process.env.NODE_ENV==="test")}function lt(r){if(r===void 0)return!1;let e=r.trim().toLowerCase();return!(e===""||e==="0"||e==="false"||e==="no"||e==="off")}var B=f(require("fs")),pt=f(require("path"));var _e=f(require("fs")),dt=f(require("path")),mt=f(require("os"));var He=dt.join(mt.homedir(),".visa-mcp"),U=class{static ensureConfigDir(){_e.existsSync(He)||_e.mkdirSync(He,{recursive:!0,mode:448})}static getConfigDir(){return He}static TOOL_STATES={login:!0,get_status:!0,get_cards:!0,add_card:!0,pay:!0,transaction_history:!0,update_spending_controls:!0,enroll_device:!1,verify_otp:!1,reset:!0,batch:!0,generate_x402_image:!1,browser_launch:!1,browser_navigate:!1,browser_snapshot:!1,browser_click:!1,browser_type:!1,browser_scroll:!1,generate_music_card:!1,generate_image_card:!0,query_onchain_prices_card:!0,generate_music_tempo_card:!0,check_music_status_tempo_card:!0,generate_image_fast_card:!0,pxlwall_card:!1,generate_video_tempo_card:!0};static loadToolStates(){return{...this.TOOL_STATES}}static getDisabledTools(){let e=new Set;for(let[t,n]of Object.entries(this.TOOL_STATES))n||e.add(t);return e}static isToolDisabled(e){return this.TOOL_STATES[e]===!1}};var vr="settings.json";function we(){return pt.join(U.getConfigDir(),vr)}var re={"auth.serverUrl":{type:"string",description:"Auth server base URL. Override for staging / self-hosted backends.",requiresRestart:!0,validate:r=>{if(typeof r!="string")throw new Error("auth.serverUrl must be a string");let e;try{e=new URL(r)}catch{throw new Error(`auth.serverUrl must be a valid URL (got: ${JSON.stringify(r)})`)}if(e.protocol!=="https:"&&e.protocol!=="http:")throw new Error(`auth.serverUrl must use http or https (got: ${e.protocol})`)}},"ui.suppressBrowser":{type:"boolean",description:"When true, the CLI/MCP server stops auto-opening result URLs in your browser."},"ui.suppressFeed":{type:"boolean",description:"When true, generated images/music are not auto-submitted to the public Made-with-Visa feed."},"tools.meta":{type:"boolean",description:"Show category meta-tools (generate_image, generate_music, ...). Restart required.",requiresRestart:!0},"tools.specific":{type:"boolean",description:"Show hardcoded per-merchant tools (generate_image_card, query_onchain_prices_card, ...). Restart required.",requiresRestart:!0},"tools.discover":{type:"boolean",description:"Show the dynamic-catalog tools (discover_tools, execute_tool). Restart required.",requiresRestart:!0}};function be(){let r=we();if(!B.existsSync(r))return{};try{let e=B.readFileSync(r,"utf-8"),t=JSON.parse(e);return!t||typeof t!="object"||Array.isArray(t)?{}:t}catch{return{}}}function ft(r){U.ensureConfigDir();let e=we(),t=`${e}.tmp`,n=JSON.stringify(r,null,2)+`
3
+ `;B.writeFileSync(t,n,{mode:384}),B.renameSync(t,e)}function je(r){let e=be()[r];return typeof e=="string"?e:void 0}function z(r){let e=be()[r];if(typeof e=="boolean")return e;if(e==="true")return!0;if(e==="false")return!1}var J=class extends Error{constructor(e){let t=Object.keys(re).sort().join(", ");super(`Unknown setting "${e}". Settable keys: ${t}. For server-controlled values (biometric.*, spending.*) use the dedicated tools (biometric_on/off, update_spending_controls).`),this.name="UnknownSettingKeyError"}},Y=class extends Error{constructor(e){let t="";e.startsWith("biometric.")?t="biometric_on / biometric_off":e.startsWith("spending.")?t="update_spending_controls":e.startsWith("cards.")?t="add_card / remove_card / set_default_card":e.startsWith("account.")&&(t="login / reset"),super(`"${e}" is a server-controlled value and cannot be set via config set. `+(t?`Use ${t} instead.`:"No client-side override is supported.")),this.name="ServerOnlySettingError"}},gt=["biometric.","spending.","account.","cards.","biometric"];function ht(r,e){if(gt.some(o=>r.startsWith(o)))throw new Y(r);let t=re[r];if(!t)throw new J(r);let n;if(t.type==="boolean")if(typeof e=="boolean")n=e;else if(typeof e=="string"){let o=e.toLowerCase();if(o==="true")n=!0;else if(o==="false")n=!1;else throw new Error(`${r} expects true or false (got: ${JSON.stringify(e)})`)}else throw new Error(`${r} expects a boolean (got: ${typeof e})`);else{if(typeof e!="string"||e.length===0)throw new Error(`${r} expects a non-empty string`);n=e}t.validate&&t.validate(n);let s=be();return s[r]=n,ft(s),{key:r,value:n,requiresRestart:!!t.requiresRestart,path:we()}}function yt(r){if(gt.some(s=>r.startsWith(s)))throw new Y(r);let e=re[r];if(!e)throw new J(r);let t=be(),n=r in t;return n&&(delete t[r],ft(t)),{key:r,removed:n,requiresRestart:n&&!!e.requiresRestart,path:we()}}var Sr="https://auth.visacli.sh";function ve(){let r=process.env.VISA_AUTH_URL;if(r!==void 0&&r!=="")return r;let e=je("auth.serverUrl");return e!==void 0?e:Sr}function _t(){let r=process.env.VISA_SUPPRESS_BROWSER;return r!==void 0?r==="true":z("ui.suppressBrowser")??!1}function wt(){let r=process.env.VISA_SUPPRESS_FEED;return r!==void 0?r==="true":z("ui.suppressFeed")??!1}function ne(){let r=process.env.VISA_META_TOOLS;return r!==void 0?r!=="false":z("tools.meta")??!0}function se(){let r=process.env.VISA_SPECIFIC_TOOLS;return r!==void 0?r!=="false":z("tools.specific")??!0}function oe(){let r=process.env.VISA_DISCOVER_TOOLS;return r!==void 0?r!=="false":z("tools.discover")??!0}var Ve="1.11.0-rc.4",Se=class{constructor(e){this.getSessionToken=e;this.baseUrl=ve()}getSessionToken;baseUrl;lastSignals={};parseServerSignals(e){if(this.lastSignals={},!ye()){let n=e.headers.get("X-Latest-Version"),s=e.headers.get("X-Update-Message");n&&ut(n,Ve)&&(this.lastSignals.updateAvailable={version:n,message:s||`Update available: v${n}. Run: npm install -g @visa/cli && visa-cli setup`})}let t=e.headers.get("X-Feedback-Prompt");if(t)try{this.lastSignals.feedbackPrompt=JSON.parse(t)}catch{}}getClientVersion(){return Ve}async request(e,t,n,s,o){let i=await this.getSessionToken();if(!i)throw new Error("Not logged in. Sign up at https://visacli.sh or run: visa-cli setup");let u={Authorization:`Bearer ${i}`};o&&(e==="GET"?u["X-User-Context"]=o.replace(/[\r\n\0]/g," ").slice(0,1e3):n={...n||{},user_context:o}),n&&(u["Content-Type"]="application/json");let l;try{l=await at(`${this.baseUrl}${t}`,{method:e,headers:{...u,"X-Visa-CLI-Version":Ve},body:n?JSON.stringify(n):void 0,timeoutMs:s})}catch(p){throw p.name==="AbortError"||p.message?.includes("aborted")?new Error("The request timed out. The server may be under heavy load. Please try again."):new Error("Cannot reach the Visa CLI server. Check your internet connection and try again.")}if(this.parseServerSignals(l),l.status===401)throw new Error("Your session has expired. Run: visa-cli setup");if(l.status===429){let p=l.headers.get("Retry-After")||"3";throw new Error(`Rate limited \u2014 wait ${p}s. Tip: use the batch tool to combine multiple requests into one.`)}if(l.status===503)throw new Error("Visa CLI is temporarily unavailable. Check https://visacli.sh for status.");let c;try{c=await l.json()}catch{throw l.status===500?new Error(`Server error on ${t}. Try again or check https://visacli.sh for status.`):new Error(`Unexpected response from ${t}. Try again.`)}if(!l.ok)throw l.status===500?new Error(`Server error on ${t}. Try again or check https://visacli.sh for status.`):c?.declined?new b(c.error||"Your card was declined.",!!c.retryable,c.code,c.reason):new Error(c?.error||`Request failed (${l.status}). Try again.`);return c}async pay(e,t){return this.request("POST","/v1/pay",e,void 0,t)}async shortcut(e,t,n,s){return this.request("POST",`/v1/shortcuts/${encodeURIComponent(e)}`,t,n,s)}async batch(e,t,n){return this.request("POST","/v1/batch",e,t,n)}async catalogSearch(e,t){let n=new URLSearchParams;e&&n.set("q",e),t&&n.set("category",t);let s=n.toString();return this.request("GET",`/v1/catalog${s?`?${s}`:""}`)}async catalogTool(e){try{return await this.request("GET",`/v1/catalog/${encodeURIComponent(e)}`)}catch{return null}}async paymentPreview(e,t){return this.request("POST","/v1/payment-preview",e,void 0,t)}async getStatus(e){return this.request("GET","/v1/status",void 0,void 0,e)}async getTransactions(e){return this.request("GET","/v1/transactions",void 0,void 0,e)}async updateSpendingControls(e,t){return this.request("POST","/v1/spending-controls",e,void 0,t)}async removeCard(e,t,n){return this.request("DELETE",`/v1/cards/${encodeURIComponent(String(e))}`,t,void 0,n)}async setDefaultCard(e,t,n){return this.request("POST",`/v1/cards/${encodeURIComponent(String(e))}/default`,t,void 0,n)}async getAttestationChallenge(){return this.request("GET","/v1/attestation-challenge")}async registerAttestationKey(e){return this.request("POST","/v1/attestation-key",{publicKey:e})}async setBiometricPreference(e,t){return this.request("POST","/v1/biometric-preference",{...e,confirm:!0},void 0,t)}async logout(e,t){return this.request("POST","/v1/logout",e,void 0,t)}async feedback(e,t,n){return this.request("POST","/v1/feedback",{message:e,...t&&{transaction_id:t}},void 0,n)}async createAppApiKey(e){return this.request("POST","/v1/api/keys",e)}async listAppApiKeys(){return this.request("GET","/v1/api/keys")}async revokeAppApiKey(e){return this.request("DELETE",`/v1/api/keys/${encodeURIComponent(String(e))}`)}async feedSubmit(e){return this.request("POST","/v1/feed",e)}async feedList(e){let t=new URLSearchParams;e?.tab&&t.set("tab",e.tab),e?.limit&&t.set("limit",String(e.limit)),e?.offset&&t.set("offset",String(e.offset));let n=t.toString();return this.request("GET",`/v1/feed${n?"?"+n:""}`)}async feedVote(e,t){return this.request("POST",`/v1/feed/${encodeURIComponent(e)}/vote`,{direction:t})}async feedApprove(e){return this.request("POST",`/v1/feed/${encodeURIComponent(e)}/approve`)}async feedDelete(e){return this.request("DELETE",`/v1/feed/${encodeURIComponent(e)}`)}async feedPending(){return this.request("GET","/v1/feed/pending")}async submitFeedback(e,t,n){return this.request("POST","/v1/feedback",{message:e,...t&&{transaction_id:t}},void 0,n)}async getFeedback(e,t){let n=new URLSearchParams;e&&n.set("limit",String(e));let s=n.toString();return this.request("GET",`/v1/feedback${s?"?"+s:""}`,void 0,void 0,t)}async submitRatedFeedback(e){return this.request("POST","/v1/feedback",e)}};var Ge=require("child_process"),Et=require("util"),xt=f(require("crypto")),k=f(require("fs")),Rt=f(require("os")),D=f(require("path"));var R=f(require("fs")),Be=f(require("path")),bt=f(require("os")),Ke=Be.join(bt.homedir(),".visa-mcp"),ae=Be.join(Ke,"mcp-server.log"),kr=5*1024*1024,Fe=null;function Tr(){R.existsSync(Ke)||R.mkdirSync(Ke,{recursive:!0,mode:448})}function Er(){if(!Fe){if(Tr(),R.existsSync(ae)&&R.statSync(ae).size>kr){let e=ae+".1";R.existsSync(e)&&R.unlinkSync(e),R.renameSync(ae,e)}Fe=R.createWriteStream(ae,{flags:"a"})}return Fe}function ke(r,...e){let t=new Date().toISOString(),n=e.map(o=>typeof o=="string"?o:JSON.stringify(o,null,2)).join(" "),s=`[${t}] [${r}] ${n}
4
4
  `;process.stderr.write(s),Er().write(s)}var a={debug:(...r)=>ke("DEBUG",...r),info:(...r)=>ke("INFO",...r),warn:(...r)=>ke("WARN",...r),error:(...r)=>ke("ERROR",...r)};var ie=(0,Et.promisify)(Ge.execFile),xe=D.join(Rt.homedir(),".visa-mcp","bin"),X=D.join(xe,"Visa CLI"),xr=D.join(__dirname,"..","native"),vt="5",St=D.join(xe,"visa-keychain.version"),kt=D.join(xe,"visa-keychain.sha256");function Tt(r){let e=k.readFileSync(r);return xt.createHash("sha256").update(e).digest("hex")}async function It(){try{if(k.readFileSync(St,"utf-8").trim()===vt&&k.existsSync(X)){let n=k.readFileSync(kt,"utf-8").trim();if(Tt(X)!==n)a.warn("binary:hash-mismatch",{message:"Binary hash mismatch \u2014 possible tampering detected. Recompiling from source."}),k.unlinkSync(X);else return X}}catch{}let r=D.join(xr,"visa-keychain.m");if(k.existsSync(r)||(r=D.resolve(__dirname,"..","..","native","visa-keychain.m")),k.existsSync(r)||(r=D.resolve(__dirname,"..","native","visa-keychain.m")),!k.existsSync(r))throw new Error("visa-keychain.m source not found. Reinstall Visa CLI.");k.mkdirSync(xe,{recursive:!0,mode:448});try{await ie("clang",["-framework","Security","-framework","LocalAuthentication","-framework","Foundation","-framework","AppKit","-o",X,r],{timeout:3e4})}catch(t){throw t.code==="ENOENT"?new Error("Xcode Command Line Tools required. Install: xcode-select --install"):t}let e=Tt(X);return k.writeFileSync(kt,e,{mode:384}),k.writeFileSync(St,vt,{mode:384}),X}async function At(r){let e=await It(),t;try{t=(await ie(e,r,{timeout:6e4})).stdout}catch(o){t=o.stdout||"";let i=t.trim();throw i.startsWith("ERROR:")?new Error(i.slice(6)):new Error(o.stderr?.trim()||o.message||"Unknown error")}let n=t.trim();if(n.startsWith("OK:"))return n.slice(3);if(n==="OK")return;let s=n.startsWith("ERROR:")?n.slice(6):"Unknown error";throw new Error(s)}var We=null;function F(){return process.env.VISA_MOCK_TOUCHID==="true"?!0:process.platform!=="darwin"?!1:We!==null?We:(We=!0,!0)}var Te="visa-cli",Ee="attestation-key";async function Rr(r){try{await ie("security",["delete-generic-password","-s",Te,"-a",Ee],{timeout:5e3})}catch{}await ie("security",["add-generic-password","-s",Te,"-a",Ee,"-w",r],{timeout:5e3})}async function Ir(){try{let{stdout:r}=await ie("security",["find-generic-password","-s",Te,"-a",Ee,"-w"],{timeout:5e3});return r.trim()||null}catch{return null}}async function Ct(){let r=await At(["generate-key"]);if(!r)throw new Error("Key generation returned no output");let e=r.indexOf(":");if(e<0)throw new Error("Unexpected generate-key output format");let t=r.slice(0,e),n=r.slice(e+1);return await Rr(t),n}async function Ot(r,e){if(process.env.VISA_MOCK_TOUCHID==="true")return Promise.resolve("mock-ecdsa-signature-for-testing");let t=await Ir();if(!t)throw new Error("Attestation key not found. Run setup to generate a new key.");let n=await It(),s=["sign",r];return e&&s.push(e),new Promise((o,i)=>{let u=(0,Ge.execFile)(n,s,{timeout:6e4},(l,c)=>{let p=(c||"").trim();if(l){p.startsWith("ERROR:")?i(new Error(p.slice(6))):i(new Error(l.stderr?.trim()||l.message||"Unknown error"));return}p.startsWith("OK:")?o(p.slice(3)):i(new Error(p.startsWith("ERROR:")?p.slice(6):"Unknown error"))});u.stdin.write(t),u.stdin.end()})}async function Pt(){try{await ie("security",["delete-generic-password","-s",Te,"-a",Ee],{timeout:5e3})}catch{}try{await At(["delete-key"])}catch{}}var Ae=require("child_process"),Lt=require("util"),G=f(require("fs")),Ce=f(require("os")),Qe=f(require("path"));var K="6820f6e91b762e645c9bf020c0d3673bb99d4a25a824880c0d548e10bb9bc7b1";var M=(0,Lt.promisify)(Ae.execFile),Ze=Qe.join(Ce.homedir(),".visa-mcp"),ce=Qe.join(Ze,"session-token"),q="visa-cli",W="session-token",Re="rc-access",Ar=5e3,Ie=class extends Error{constructor(e){super(e),this.name="CredentialAccessError"}};function Cr(r){let e=r;return[e?.message,e?.stderr].filter(t=>typeof t=="string").join(`
5
5
  `)}function qt(r){let e=r;if(e?.code==="EPERM"||e?.code==="EACCES")return!0;let t=Cr(r).toLowerCase();return t.includes("operation not permitted")||t.includes("permission denied")}async function Or(){try{let{stdout:r}=await M("security",["find-generic-password","-s",q,"-a",W,"-w"],{timeout:5e3});return r.trim()||null}catch(r){if(qt(r))throw new Ie("Unable to read Visa CLI credentials from macOS Keychain. In sandboxed agents such as Codex, rerun with keychain access or run this command outside the sandbox.");return null}}async function Pr(r){try{try{await M("security",["delete-generic-password","-s",q,"-a",W],{timeout:5e3})}catch{}return await M("security",["add-generic-password","-s",q,"-a",W,"-w",r],{timeout:5e3}),!0}catch{return!1}}async function Lr(){try{await M("security",["delete-generic-password","-s",q,"-a",W],{timeout:5e3})}catch{}}async function qr(){if(!et())return null;try{let{stdout:r}=await M("secret-tool",["lookup","service",q,"account",W],{timeout:5e3});return r.trim()||null}catch{return null}}async function Ur(r){if(!et())return!1;try{let e=(0,Ae.execFile)("secret-tool",["store","--label",`${q} ${W}`,"service",q,"account",W]);return e.stdin?(e.stdin.write(r),e.stdin.end(),await Promise.race([new Promise((t,n)=>{e.on("exit",s=>s===0?t():n(new Error(`secret-tool exited ${s}`))),e.on("error",n)}),new Promise((t,n)=>setTimeout(()=>{e.kill(),n(new Error("secret-tool timed out"))},Ar))]),!0):!1}catch{return!1}}async function Nr(){if(et())try{await M("secret-tool",["clear","service",q,"account",W],{timeout:5e3})}catch{}}function et(){return!!process.env.DBUS_SESSION_BUS_ADDRESS}async function $r(){try{let{stdout:r}=await M("security",["find-generic-password","-s",q,"-a",Re,"-w"],{timeout:5e3});return r.trim()||null}catch{return null}}async function Dr(r){try{try{await M("security",["delete-generic-password","-s",q,"-a",Re],{timeout:5e3})}catch{}await M("security",["add-generic-password","-s",q,"-a",Re,"-w",r],{timeout:5e3})}catch{}}async function Mr(){try{await M("security",["delete-generic-password","-s",q,"-a",Re],{timeout:5e3})}catch{}}function ze(){try{return G.readFileSync(ce,"utf-8").trim()||null}catch(r){if(qt(r))throw new Ie(`Unable to read Visa CLI credentials from ${ce}. Check file permissions or rerun with access to the Visa CLI credential directory.`);return null}}function Ut(r){G.mkdirSync(Ze,{recursive:!0,mode:448}),G.writeFileSync(ce,r,{mode:384}),process.platform==="win32"&&Hr(ce)}function Xe(){try{G.unlinkSync(ce)}catch{}}function Hr(r){try{let e=Ce.userInfo().username;(0,Ae.execFile)("icacls",[r,"/inheritance:r","/grant:r",`${e}:F`],{timeout:5e3},t=>{t&&console.error(`[visa-cli] icacls ACL restriction failed: ${t.message}`)})}catch(e){console.error(`[visa-cli] Failed to invoke icacls: ${e instanceof Error?e.message:String(e)}`)}}function Ye(){switch(process.platform){case"darwin":return{get:Or,store:Pr,delete:Lr};case"linux":return{get:qr,store:Ur,delete:Nr};default:return{get:async()=>ze(),store:async r=>{try{return Ut(r),!0}catch{return!1}},delete:async()=>Xe(),storesInSessionFile:!0}}}var I=class{static async getSessionToken(){if(process.env.VISA_MOCK_KEYCHAIN==="true")return Promise.resolve("mock-session-token-for-testing");let e=Ye(),t=await e.get();if(t)return t;let n=ze();return n?(await e.store(n),n):null}static async saveSessionToken(e){if(process.env.VISA_MOCK_KEYCHAIN==="true")return;let t=Ye();if(await t.store(e)){if(await t.get()===e){t.storesInSessionFile||Xe();return}await t.delete()}if(Ut(e),ze()!==e)throw new Error("Failed to persist session token. "+(process.platform==="darwin"?'Check Keychain Access permissions for "visa-cli".':`Ensure ${Ze} is writable.`))}static async getRcAccessToken(){return process.env.VISA_MOCK_KEYCHAIN==="true"?K:$r()}static async saveRcAccessToken(e){process.env.VISA_MOCK_KEYCHAIN!=="true"&&await Dr(e)}static async deleteSessionToken(){if(process.env.VISA_MOCK_KEYCHAIN==="true")return;await Ye().delete(),Xe()}static async clearAll(){await this.deleteSessionToken(),await Mr()}};var Oe={generate_image:{intro:"Generate an AI image.",tiers:{balanced:{toolId:"fal-flux-pro",priceCents:4,notes:"FLUX Pro v1.1, 1K, ~10s (DEFAULT \u2014 good quality/speed tradeoff)"},fast:{toolId:"fal-flux-schnell",priceCents:1,notes:"FLUX Schnell, 1K, ~3s (drafts, iteration, cheapest)"},pro:{toolId:"fal-flux-pro-ultra",priceCents:6,notes:"FLUX Pro Ultra, 2K, ~30s (hero images, detail)"},text_heavy:{toolId:"fal-ideogram-v2",priceCents:8,notes:"Ideogram V2 \u2014 best when the image contains rendered text/logos"},vector:{toolId:"fal-recraft-v3",priceCents:5,notes:"Recraft V3 \u2014 vector/flat/illustration styles"}},guidance:"If the user didn't specify a tier, pick 'balanced' unless the prompt clearly signals otherwise (text \u2192 text_heavy, logo/icon \u2192 vector, quick test \u2192 fast, hero/print \u2192 pro).",inputProperties:{prompt:{type:"string",description:"Text description of the image to generate."},aspect_ratio:{type:"string",description:'Aspect ratio, e.g. "16:9", "1:1", "9:16".',default:"16:9"}},required:["prompt"]},generate_video:{intro:"Generate an AI video from a text prompt.",tiers:{balanced:{toolId:"fal-minimax-video",priceCents:15,notes:"MiniMax \u2014 good quality/price balance (DEFAULT)"},fast:{toolId:"fal-wan-video",priceCents:10,notes:"Wan \u2014 cheapest, shorter clips"},pro:{toolId:"fal-kling-video",priceCents:20,notes:"Kling \u2014 highest quality, cinematic"}},guidance:"Show the tier menu with prices unless the user specified one. Videos take 60-180s to generate.",inputProperties:{prompt:{type:"string",description:"Text description of the video scene."},aspect_ratio:{type:"string",description:'Aspect ratio, e.g. "16:9" or "9:16".',default:"16:9"}},required:["prompt"]},generate_music:{intro:"Generate an original music track from a prompt.",tiers:{suno:{toolId:"suno-music",priceCents:10,notes:"Suno v4 \u2014 songs with vocals, lyrics, full arrangement"}},guidance:"Takes ~60-90s. Returns an audio URL the user can play.",inputProperties:{prompt:{type:"string",description:"Musical style / mood / lyrics hint."},instrumental:{type:"boolean",description:"True for instrumental (no vocals), false for vocal track.",default:!1}},required:["prompt"]},generate_audio:{intro:"Generate speech or sound effects.",tiers:{tts:{toolId:"fal-metavoice",priceCents:3,notes:"MetaVoice \u2014 high-quality TTS from text"},sfx:{toolId:"fal-stable-audio",priceCents:4,notes:"Stable Audio \u2014 sound effects and ambient from a prompt"}},guidance:'Pick "tts" for spoken words, "sfx" for music-beds/effects/ambient.',inputProperties:{prompt:{type:"string",description:"Text to speak (tts) or description of sound (sfx)."}},required:["prompt"]},generate_3d:{intro:"Generate a 3D model from a text description.",tiers:{trellis:{toolId:"fal-trellis-3d",priceCents:8,notes:"Trellis \u2014 fast text-to-3D, returns a GLB mesh URL"}},guidance:"Takes ~30-60s. Returns a downloadable 3D mesh URL.",inputProperties:{prompt:{type:"string",description:"Description of the 3D object."}},required:["prompt"]},upscale_image:{intro:"Upscale an image to higher resolution.",tiers:{aura:{toolId:"fal-aura-sr",priceCents:3,notes:"Aura SR \u2014 default; preserves detail without hallucination"}},guidance:"Pass the existing image URL. Returns an upscaled version.",inputProperties:{image_url:{type:"string",description:"URL of the image to upscale."}},required:["image_url"]},transcribe_audio:{intro:"Transcribe speech in an audio/video URL to text.",tiers:{whisper:{toolId:"fal-whisper",priceCents:2,notes:"OpenAI Whisper \u2014 fast, multilingual"}},guidance:"Pass the URL. Returns the transcript text.",inputProperties:{audio_url:{type:"string",description:"URL of the audio or video file to transcribe."}},required:["audio_url"]},run_llm:{intro:"Run a text prompt through an LLM (OpenRouter). Token-metered \u2014 prices below are per 1M input/output tokens. Typical 500-in/500-out prompts cost 1\u20139\xA2 depending on model.",tiers:{fast:{toolId:"or-gpt-4o-mini",priceCents:1,notes:"GPT-4o Mini \u2014 $0.15/M in \xB7 $0.60/M out. Fastest, cheapest, good general-purpose (DEFAULT)"},reasoning:{toolId:"or-claude-sonnet",priceCents:9,notes:"Claude 3.5 Sonnet \u2014 $3.00/M in \xB7 $15.00/M out. Strong reasoning, long-context. ~20x pricier than `fast`."},deep_reasoning:{toolId:"or-deepseek-r1",priceCents:2,notes:"DeepSeek R1 \u2014 $0.55/M in \xB7 $2.19/M out. Deep chain-of-thought reasoning, mid-range pricing."},search:{toolId:"or-perplexity-sonar",priceCents:1,notes:"Perplexity Sonar \u2014 $1.00/M in \xB7 $1.00/M out. Search-augmented, web-grounded with citations."},open_source:{toolId:"or-llama-70b",priceCents:1,notes:"Llama 3.3 70B \u2014 $0.30/M in \xB7 $0.40/M out. Open-source large model."},coding:{toolId:"or-deepseek-chat",priceCents:1,notes:"DeepSeek Chat V3 \u2014 $0.30/M in \xB7 $0.88/M out. Strong at code generation."}},guidance:"Pick based on the user's need: fast (most questions, cheapest), reasoning (complex analysis \u2014 WARN user it's ~$0.09/call), search (questions about current events), coding (code generation), deep_reasoning (hard math/logic problems).",inputProperties:{prompt:{type:"string",description:"The user query."},system_prompt:{type:"string",description:"Optional system prompt to set model behavior."},max_tokens:{type:"number",description:"Maximum output tokens.",default:1024,minimum:1,maximum:8192},temperature:{type:"number",description:"Sampling temperature \u2014 0 is deterministic, higher is more creative.",default:.7,minimum:0,maximum:2}},required:["prompt"]}};function Nt(r){let e=Oe[r];if(!e)throw new Error(`Unknown meta-tool: ${r}`);let t=[e.intro,"","Tiers:"];for(let[n,s]of Object.entries(e.tiers)){let o=`$${(s.priceCents/100).toFixed(2)}`;t.push(` - ${n.padEnd(15)} ${o.padStart(6)} ${s.notes}`)}return t.push("",e.guidance),t.join(`
6
- `)}function $t(r){let e=Oe[r];if(!e)throw new Error(`Unknown meta-tool: ${r}`);let t=Object.keys(e.tiers);return{type:"object",properties:{tier:{type:"string",enum:t,default:t[0],description:`Quality/style tier. Default: ${t[0]}.`},...e.inputProperties},required:e.required??[]}}function Pe(r,e){if(!Q.includes(r))return r;let t=Oe[r];if(!t)return r;let n=Object.keys(t.tiers),s=e||n[0],o=t.tiers[s];if(!o)throw new Error(`Unknown tier '${s}' for ${r}. Valid tiers: ${n.join(", ")}`);return o.toolId}async function Dt(r,e,t){let n=Pe(r,e.tier),{tier:s,...o}=e;return y.executeTool({tool_id:n,...o},t)}var Q=Object.keys(Oe);function Mt(r=process.env,e=process.platform){return r.VISA_CLI_NO_BROWSER==="1"||r.VISA_CLI_NO_BROWSER==="true"?{headless:!0,reason:"VISA_CLI_NO_BROWSER is set"}:r.CI==="true"||r.CI==="1"?{headless:!0,reason:"CI environment detected"}:r.SSH_CONNECTION||r.SSH_TTY?{headless:!0,reason:"SSH session detected"}:e==="linux"&&!r.DISPLAY&&!r.WAYLAND_DISPLAY?{headless:!0,reason:"Linux with no $DISPLAY or $WAYLAND_DISPLAY"}:{headless:!1}}function Ht(r,e=process.platform){return e==="darwin"?{cmd:"open",args:[r]}:e==="win32"?{cmd:"cmd",args:["/c","start","",r]}:e==="linux"?{cmd:"xdg-open",args:[r]}:null}var me=f(require("crypto")),Wt=require("child_process"),O=f(require("fs")),pe=f(require("os")),fe=f(require("path"));var jr="# visa-cli-hud-v1";function Le(r){return typeof r!="string"?!1:r.includes(jr)?!0:r.includes("visa-cli")&&r.includes("statusline")}async function jt(r,e){try{return await e()}catch(t){if(t.message==="Invalid signature"&&F()){a.warn("attestation:key-mismatch",{action:"reregistering"});try{let n=await Ct();await r.registerAttestationKey(n),a.info("attestation:key-reregistered")}catch(n){throw a.error("attestation:reregister-failure",{error:n.message}),t}return await e()}throw t}}var Vt="1.11.0-rc.3";function tt(r,e){return e?{kind:"env",var:r}:{kind:"default"}}function Vr(r,e,t){let n=process.env[r];if(n!==void 0&&n!=="")return{value:n,source:{kind:"env",var:r}};let s=je(e);return s!==void 0?{value:s,source:{kind:"settings"}}:{value:t,source:{kind:"default"}}}function ue(r,e,t){let n=process.env[r];if(n!==void 0)return{value:t==="opt-in"?n==="true":n!=="false",source:{kind:"env",var:r}};let s=z(e);return s!==void 0?{value:s,source:{kind:"settings"}}:{value:t!=="opt-in",source:{kind:"default"}}}function A(r){return r==null?"\u2014":r?"yes":"no"}function qe(r){return r==null?"\u2014":`$${r.toFixed(2)}`}async function Ft(r){let e=null,t=null;try{e=await r.api.getStatus()}catch(_){t=_?.message||"unknown error"}let n=[],s=Vr("VISA_AUTH_URL","auth.serverUrl","https://auth.visacli.sh");n.push({key:"auth.serverUrl",value:s.value,formatted:s.value,source:s.source,hint:s.source.kind==="default"?"Persist with `visa-cli config set auth.serverUrl <url>` (or set VISA_AUTH_URL for one-off overrides).":void 0}),n.push({key:"account.enrolled",value:e?.enrolled??null,formatted:A(e?.enrolled),source:e?{kind:"server"}:{kind:"unknown",reason:t||"offline"}}),e?.githubUser&&n.push({key:"account.githubUser",value:e.githubUser,formatted:e.githubUser,source:{kind:"server"}});let o=e?e.attestationRequired!==!1:void 0;n.push({key:"biometric.required",value:o,formatted:A(o),source:e?{kind:"server"}:{kind:"unknown",reason:t||"offline"},hint:o===!1?"Touch ID prompts are suppressed. Re-enable with `visa-cli biometric on`.":void 0}),n.push({key:"biometric.keyRegistered",value:e?.hasAttestationKey??null,formatted:A(e?.hasAttestationKey),source:e?{kind:"server"}:{kind:"unknown",reason:t||"offline"}}),n.push({key:"biometric.deviceAvailable",value:F(),formatted:A(F()),source:{kind:"device"}});let i=e?.spendingControls,u=i?i.max_transaction_amount??i.maxTransactionAmount??null:null,l=i?i.daily_limit??i.dailyLimit??null:null;n.push({key:"spending.maxPerTxn",value:u,formatted:qe(u),source:e?{kind:"server"}:{kind:"unknown",reason:t||"offline"}}),n.push({key:"spending.dailyLimit",value:l,formatted:qe(l),source:e?{kind:"server"}:{kind:"unknown",reason:t||"offline"}}),n.push({key:"spending.dailySpent",value:e?.dailySpent??null,formatted:qe(e?.dailySpent),source:e?{kind:"server"}:{kind:"unknown",reason:t||"offline"}}),n.push({key:"spending.dailyRemaining",value:e?.dailyRemaining??null,formatted:qe(e?.dailyRemaining),source:e?{kind:"server"}:{kind:"unknown",reason:t||"offline"}}),n.push({key:"cards.count",value:e?.cardCount??null,formatted:e?.cardCount!=null?String(e.cardCount):"\u2014",source:e?{kind:"server"}:{kind:"unknown",reason:t||"offline"}});let c=e?.cards?.find(_=>_.isDefault)??e?.cards?.[0];c&&n.push({key:"cards.default",value:{brand:c.brand??null,last4:c.last4},formatted:`${c.brand||"card"} \u2022\u2022\u2022\u2022 ${c.last4}`,source:{kind:"server"}});let p=ue("VISA_SUPPRESS_BROWSER","ui.suppressBrowser","opt-in");n.push({key:"ui.suppressBrowser",value:p.value,formatted:A(p.value),source:p.source,hint:"Persist with `visa-cli config set ui.suppressBrowser true` to stop auto-opening result URLs."});let h=ue("VISA_SUPPRESS_FEED","ui.suppressFeed","opt-in");n.push({key:"ui.suppressFeed",value:h.value,formatted:A(h.value),source:h.source});let S=ye(),T;process.env.VISA_CLI_NO_UPDATE_CHECK?T={kind:"env",var:"VISA_CLI_NO_UPDATE_CHECK"}:process.env.CI?T={kind:"env",var:"CI"}:process.env.NODE_ENV==="test"?T={kind:"env",var:"NODE_ENV"}:T={kind:"default"},n.push({key:"ui.updateCheck",value:!S,formatted:A(!S),source:T});let $=ue("VISA_META_TOOLS","tools.meta","opt-out");n.push({key:"tools.meta",value:$.value,formatted:A($.value),source:$.source,hint:"Persist with `visa-cli config set tools.meta false`. Restart Claude Code for changes to take effect."});let d=ue("VISA_SPECIFIC_TOOLS","tools.specific","opt-out");n.push({key:"tools.specific",value:d.value,formatted:A(d.value),source:d.source});let w=ue("VISA_DISCOVER_TOOLS","tools.discover","opt-out");if(n.push({key:"tools.discover",value:w.value,formatted:A(w.value),source:w.source}),n.push({key:"client.version",value:Vt,formatted:Vt,source:{kind:"default"}}),r.includeDev){let _=process.env.VISA_MOCK_KEYCHAIN;n.push({key:"dev.mockKeychain",value:_==="true",formatted:A(_==="true"),source:tt("VISA_MOCK_KEYCHAIN",!!_)});let L=process.env.VISA_MOCK_TOUCHID;n.push({key:"dev.mockTouchid",value:L==="true",formatted:A(L==="true"),source:tt("VISA_MOCK_TOUCHID",!!L)});let te=process.env.VISA_CLI_DEBUG;n.push({key:"dev.debug",value:!!te,formatted:A(!!te),source:tt("VISA_CLI_DEBUG",!!te)})}return{entries:n,statusError:t}}function Ue(){return ve()}var m=new Se(()=>I.getSessionToken()),Fr="1.11.0-rc.3",Kr=["generate_image","generate_video","generate_music","generate_audio","generate_3d","upscale_image","transcribe_audio","run_llm"],Kt=["","","You're ready to go! Try:","","Core:",'\u2022 "Show my account status" \u2192 get_status','\u2022 "List my enrolled cards" \u2192 get_cards','\u2022 "Show my recent transactions" \u2192 transaction_history','\u2022 "Set my daily limit to $50" \u2192 update_spending_controls','\u2022 "Pay https://example.com/checkout" \u2192 pay','\u2022 "Generate 3 variations in parallel" \u2192 batch',"","Fast shortcuts:",'\u2022 "Generate an image of a sunset over Tokyo" \u2192 generate_image_card (~$0.06)','\u2022 "Make a fast thumbnail: minimalist cat logo" \u2192 generate_image_fast_card (~$0.04)','\u2022 "Make a 4-second video of a penguin juggling" \u2192 generate_video_tempo_card (~$0.30)','\u2022 "Make a song about coding late at night" \u2192 generate_music_tempo_card (~$0.10)','\u2022 "Check the status of my music job" \u2192 check_music_status_tempo_card','\u2022 "What is ETH on Base trading at?" \u2192 query_onchain_prices_card (~$0.02)','\u2022 "Explore stablecoin inflows on Base" \u2192 allium_explorer_card','\u2022 "Open the latest Allium result set" \u2192 allium_explorer_results_card','\u2022 "Show pxlwall campaign insights" \u2192 pxlwall_card',"","Category tools:",...Kr.map(r=>`\u2022 "${r.replace(/_/g," ")}" \u2192 ${r}`),"","Tool catalog:",'\u2022 "Find an image upscaler" \u2192 discover_tools','\u2022 "Run fal-aura-sr on this URL" \u2192 execute_tool'].join(`
6
+ `)}function $t(r){let e=Oe[r];if(!e)throw new Error(`Unknown meta-tool: ${r}`);let t=Object.keys(e.tiers);return{type:"object",properties:{tier:{type:"string",enum:t,default:t[0],description:`Quality/style tier. Default: ${t[0]}.`},...e.inputProperties},required:e.required??[]}}function Pe(r,e){if(!Q.includes(r))return r;let t=Oe[r];if(!t)return r;let n=Object.keys(t.tiers),s=e||n[0],o=t.tiers[s];if(!o)throw new Error(`Unknown tier '${s}' for ${r}. Valid tiers: ${n.join(", ")}`);return o.toolId}async function Dt(r,e,t){let n=Pe(r,e.tier),{tier:s,...o}=e;return y.executeTool({tool_id:n,...o},t)}var Q=Object.keys(Oe);function Mt(r=process.env,e=process.platform){return r.VISA_CLI_NO_BROWSER==="1"||r.VISA_CLI_NO_BROWSER==="true"?{headless:!0,reason:"VISA_CLI_NO_BROWSER is set"}:r.CI==="true"||r.CI==="1"?{headless:!0,reason:"CI environment detected"}:r.SSH_CONNECTION||r.SSH_TTY?{headless:!0,reason:"SSH session detected"}:e==="linux"&&!r.DISPLAY&&!r.WAYLAND_DISPLAY?{headless:!0,reason:"Linux with no $DISPLAY or $WAYLAND_DISPLAY"}:{headless:!1}}function Ht(r,e=process.platform){return e==="darwin"?{cmd:"open",args:[r]}:e==="win32"?{cmd:"cmd",args:["/c","start","",r]}:e==="linux"?{cmd:"xdg-open",args:[r]}:null}var me=f(require("crypto")),Wt=require("child_process"),O=f(require("fs")),pe=f(require("os")),fe=f(require("path"));var jr="# visa-cli-hud-v1";function Le(r){return typeof r!="string"?!1:r.includes(jr)?!0:r.includes("visa-cli")&&r.includes("statusline")}async function jt(r,e){try{return await e()}catch(t){if(t.message==="Invalid signature"&&F()){a.warn("attestation:key-mismatch",{action:"reregistering"});try{let n=await Ct();await r.registerAttestationKey(n),a.info("attestation:key-reregistered")}catch(n){throw a.error("attestation:reregister-failure",{error:n.message}),t}return await e()}throw t}}var Vt="1.11.0-rc.4";function tt(r,e){return e?{kind:"env",var:r}:{kind:"default"}}function Vr(r,e,t){let n=process.env[r];if(n!==void 0&&n!=="")return{value:n,source:{kind:"env",var:r}};let s=je(e);return s!==void 0?{value:s,source:{kind:"settings"}}:{value:t,source:{kind:"default"}}}function ue(r,e,t){let n=process.env[r];if(n!==void 0)return{value:t==="opt-in"?n==="true":n!=="false",source:{kind:"env",var:r}};let s=z(e);return s!==void 0?{value:s,source:{kind:"settings"}}:{value:t!=="opt-in",source:{kind:"default"}}}function A(r){return r==null?"\u2014":r?"yes":"no"}function qe(r){return r==null?"\u2014":`$${r.toFixed(2)}`}async function Ft(r){let e=null,t=null;try{e=await r.api.getStatus()}catch(_){t=_?.message||"unknown error"}let n=[],s=Vr("VISA_AUTH_URL","auth.serverUrl","https://auth.visacli.sh");n.push({key:"auth.serverUrl",value:s.value,formatted:s.value,source:s.source,hint:s.source.kind==="default"?"Persist with `visa-cli config set auth.serverUrl <url>` (or set VISA_AUTH_URL for one-off overrides).":void 0}),n.push({key:"account.enrolled",value:e?.enrolled??null,formatted:A(e?.enrolled),source:e?{kind:"server"}:{kind:"unknown",reason:t||"offline"}}),e?.githubUser&&n.push({key:"account.githubUser",value:e.githubUser,formatted:e.githubUser,source:{kind:"server"}});let o=e?e.attestationRequired!==!1:void 0;n.push({key:"biometric.required",value:o,formatted:A(o),source:e?{kind:"server"}:{kind:"unknown",reason:t||"offline"},hint:o===!1?"Touch ID prompts are suppressed. Re-enable with `visa-cli biometric on`.":void 0}),n.push({key:"biometric.keyRegistered",value:e?.hasAttestationKey??null,formatted:A(e?.hasAttestationKey),source:e?{kind:"server"}:{kind:"unknown",reason:t||"offline"}}),n.push({key:"biometric.deviceAvailable",value:F(),formatted:A(F()),source:{kind:"device"}});let i=e?.spendingControls,u=i?i.max_transaction_amount??i.maxTransactionAmount??null:null,l=i?i.daily_limit??i.dailyLimit??null:null;n.push({key:"spending.maxPerTxn",value:u,formatted:qe(u),source:e?{kind:"server"}:{kind:"unknown",reason:t||"offline"}}),n.push({key:"spending.dailyLimit",value:l,formatted:qe(l),source:e?{kind:"server"}:{kind:"unknown",reason:t||"offline"}}),n.push({key:"spending.dailySpent",value:e?.dailySpent??null,formatted:qe(e?.dailySpent),source:e?{kind:"server"}:{kind:"unknown",reason:t||"offline"}}),n.push({key:"spending.dailyRemaining",value:e?.dailyRemaining??null,formatted:qe(e?.dailyRemaining),source:e?{kind:"server"}:{kind:"unknown",reason:t||"offline"}}),n.push({key:"cards.count",value:e?.cardCount??null,formatted:e?.cardCount!=null?String(e.cardCount):"\u2014",source:e?{kind:"server"}:{kind:"unknown",reason:t||"offline"}});let c=e?.cards?.find(_=>_.isDefault)??e?.cards?.[0];c&&n.push({key:"cards.default",value:{brand:c.brand??null,last4:c.last4},formatted:`${c.brand||"card"} \u2022\u2022\u2022\u2022 ${c.last4}`,source:{kind:"server"}});let p=ue("VISA_SUPPRESS_BROWSER","ui.suppressBrowser","opt-in");n.push({key:"ui.suppressBrowser",value:p.value,formatted:A(p.value),source:p.source,hint:"Persist with `visa-cli config set ui.suppressBrowser true` to stop auto-opening result URLs."});let h=ue("VISA_SUPPRESS_FEED","ui.suppressFeed","opt-in");n.push({key:"ui.suppressFeed",value:h.value,formatted:A(h.value),source:h.source});let S=ye(),T;process.env.VISA_CLI_NO_UPDATE_CHECK?T={kind:"env",var:"VISA_CLI_NO_UPDATE_CHECK"}:process.env.CI?T={kind:"env",var:"CI"}:process.env.NODE_ENV==="test"?T={kind:"env",var:"NODE_ENV"}:T={kind:"default"},n.push({key:"ui.updateCheck",value:!S,formatted:A(!S),source:T});let $=ue("VISA_META_TOOLS","tools.meta","opt-out");n.push({key:"tools.meta",value:$.value,formatted:A($.value),source:$.source,hint:"Persist with `visa-cli config set tools.meta false`. Restart Claude Code for changes to take effect."});let d=ue("VISA_SPECIFIC_TOOLS","tools.specific","opt-out");n.push({key:"tools.specific",value:d.value,formatted:A(d.value),source:d.source});let w=ue("VISA_DISCOVER_TOOLS","tools.discover","opt-out");if(n.push({key:"tools.discover",value:w.value,formatted:A(w.value),source:w.source}),n.push({key:"client.version",value:Vt,formatted:Vt,source:{kind:"default"}}),r.includeDev){let _=process.env.VISA_MOCK_KEYCHAIN;n.push({key:"dev.mockKeychain",value:_==="true",formatted:A(_==="true"),source:tt("VISA_MOCK_KEYCHAIN",!!_)});let L=process.env.VISA_MOCK_TOUCHID;n.push({key:"dev.mockTouchid",value:L==="true",formatted:A(L==="true"),source:tt("VISA_MOCK_TOUCHID",!!L)});let te=process.env.VISA_CLI_DEBUG;n.push({key:"dev.debug",value:!!te,formatted:A(!!te),source:tt("VISA_CLI_DEBUG",!!te)})}return{entries:n,statusError:t}}function Ue(){return ve()}var m=new Se(()=>I.getSessionToken()),Fr="1.11.0-rc.4",Kr=["generate_image","generate_video","generate_music","generate_audio","generate_3d","upscale_image","transcribe_audio","run_llm"],Kt=["","","You're ready to go! Try:","","Core:",'\u2022 "Show my account status" \u2192 get_status','\u2022 "List my enrolled cards" \u2192 get_cards','\u2022 "Show my recent transactions" \u2192 transaction_history','\u2022 "Set my daily limit to $50" \u2192 update_spending_controls','\u2022 "Pay https://example.com/checkout" \u2192 pay','\u2022 "Generate 3 variations in parallel" \u2192 batch',"","Fast shortcuts:",'\u2022 "Generate an image of a sunset over Tokyo" \u2192 generate_image_card (~$0.06)','\u2022 "Make a fast thumbnail: minimalist cat logo" \u2192 generate_image_fast_card (~$0.04)','\u2022 "Make a 4-second video of a penguin juggling" \u2192 generate_video_tempo_card (~$0.30)','\u2022 "Make a song about coding late at night" \u2192 generate_music_tempo_card (~$0.10)','\u2022 "Check the status of my music job" \u2192 check_music_status_tempo_card','\u2022 "What is ETH on Base trading at?" \u2192 query_onchain_prices_card (~$0.02)','\u2022 "Explore stablecoin inflows on Base" \u2192 allium_explorer_card','\u2022 "Open the latest Allium result set" \u2192 allium_explorer_results_card','\u2022 "Show pxlwall campaign insights" \u2192 pxlwall_card',"","Category tools:",...Kr.map(r=>`\u2022 "${r.replace(/_/g," ")}" \u2192 ${r}`),"","Tool catalog:",'\u2022 "Find an image upscaler" \u2192 discover_tools','\u2022 "Run fal-aura-sr on this URL" \u2192 execute_tool'].join(`
7
7
  `);function C(r){if(!r||typeof r!="string"||_t())return;let e;try{e=new URL(r)}catch{return}if(e.protocol!=="https:"&&e.protocol!=="http:")return;let t=e.toString(),n=Mt();if(n.headless){a.info(`Browser auto-open skipped (${n.reason}). URL: ${t}`);return}let s=Ht(t);if(!s){a.info(`No browser command for platform "${pe.platform()}". URL: ${t}`);return}(0,Wt.execFile)(s.cmd,s.args,o=>{o&&a.warn(`Browser open failed: ${o.message}. URL: ${t}`)})}async function E(r){return jt(m,r)}function P(r,e){let t=r.retryable?`The processor returned a transient decline (code ${r.code??"unknown"}). This is not a permanent failure \u2014 it usually clears within ~60 seconds and is most often triggered by rapid successive charges on the same card. Tell the user the call was temporarily declined and that you will retry shortly, then wait at least 60 seconds before retrying the SAME call exactly once. Do not retry more than once. Do not assume the user has run out of funds.`:`The processor returned a non-retryable decline (code ${r.code??"unknown"}). Stop the current task and tell the user their card was declined for ${e.merchantName}. Suggest they check their card status, available balance, or try a different default card via 'visa-cli cards'. Do not retry automatically.`;return{success:!1,declined:!0,retryable:r.retryable,code:r.code,reason:r.reason,merchantName:e.merchantName,amount:e.amount,message:r.message,agent_guidance:t}}var le=null,Br=3e4;function Gt(){le=null}async function Wr(r){let e=Date.now();if(le&&le.expiresAt>e)return le.value;try{let n=(await m.getStatus(r)).attestationRequired!==!1;return le={value:n,expiresAt:e+Br},n}catch{return!0}}async function v(r,e,t,n,s){if(!F()){a.warn("attestation:unavailable",{context:r});return}if(!await Wr(s)){a.info("attestation:skipped-by-server-policy",{context:r});return}a.info("attestation:attempt",{context:r,amount:e,merchant:t});try{let{nonce:i}=await m.getAttestationChallenge(),u=Buffer.from(JSON.stringify({nonce:i,amount:e,merchant:t,context:r})).toString("base64");a.info("touchid:prompt",{context:r,amount:e,merchant:t});let l=await Ot(u,n);return a.info("attestation:success",{context:r,amount:e,merchant:t}),{signature:l,nonce:i,amount:e,merchant:t}}catch(i){throw a.error("attestation:failure",{context:r,amount:e,merchant:t,error:i.message}),i}}async function N(r,e,t){let n=await m.paymentPreview({tool:r,url:e},t);if(!n||!n.merchantName||!n.amount||n.amount<=0)throw new Error("Could not determine payment amount and merchant. Try again.");if(!Number.isFinite(n.amount)||n.amount<0||n.amount>999999)throw new Error(`Invalid payment amount: ${n.amount}. Payment rejected for safety.`);return n}function H(r){if(r.pricingMode==="max-cap"){let e=typeof r.estimatedAmount=="number"&&r.estimatedAmount>0?` (estimated $${r.estimatedAmount.toFixed(2)})`:"";return`pay up to $${r.amount.toFixed(2)} to ${r.merchantName}${e}`}return`pay $${r.amount.toFixed(2)} to ${r.merchantName}`}function Jt(){return fe.join(pe.homedir(),".visa-mcp","allium-results")}var Gr=16*1024,Jr=50*1024*1024,Yr=10;function zr(r){return r.replace(/[^A-Za-z0-9_\-]/g,"_").slice(0,128)}function Xr(r,e){let t=Jt();O.mkdirSync(t,{recursive:!0});let n=zr(r),s=fe.join(t,`${n}.csv`);O.writeFileSync(s,e);let o=Buffer.byteLength(e),i=e.split(`
8
8
  `),u=i[0]??"",l=i.slice(1).filter(h=>h.length>0),c=[u,...l.slice(0,Yr)].join(`
9
9
  `),p={file_path:s,row_count:l.length,size_bytes:o,columns:u,preview:c,truncated:!0};if(o>Jr){let h=(o/1048576).toFixed(1);a.warn("allium:large_csv_written",{sessionId:r,size_bytes:o,file_path:s}),p.warning=`Wrote ${h} MB to ${s}. Delete ~/.visa-mcp/allium-results/ files you no longer need \u2014 they are never auto-cleaned.`}return p}function Qr(){let r=Jt();try{if(!O.existsSync(r))return{file_count:0,size_bytes:0,path:r};let e=O.readdirSync(r),t=0,n=0;for(let s of e)try{let o=O.statSync(fe.join(r,s));o.isFile()&&(t+=o.size,n++)}catch{}return{file_count:n,size_bytes:t,path:r}}catch(e){return a.warn("allium:disk_usage_error",{error:e.message}),{file_count:0,size_bytes:0,path:r}}}async function ge(r){if(!wt())try{let e=await I.getSessionToken();if(!e)return;await fetch(`${Ue()}/v1/feed`,{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${e}`},body:JSON.stringify({prompt:r.prompt,tool:r.tool,media_url:r.mediaUrl,media_type:r.mediaType,cost:r.cost,transaction_id:r.transactionId,auto:!0,...r.userContext&&{user_context:r.userContext}}),signal:AbortSignal.timeout(5e3)}),a.info("feed:submitted",{tool:r.tool,mediaType:r.mediaType})}catch{}}async function Zr(r,e){if(!r.url||!r.url.trim())throw new Error("A URL is required for payments. Provide the merchant payment endpoint.");let t=await N(void 0,r.url,e);a.info("payment:attempt",{tool:"pay",amount:t.amount,merchant:t.merchantName,url:r.url});try{return await E(async()=>{let n=await v(r.url||"pay",t.amount,t.merchantName,H(t)),s=await m.pay({url:r.url||"",merchantName:r.merchantName||"Unknown",description:r.description||"",method:r.method,body:r.body,attestation:n,idempotencyKey:me.randomUUID()},e);return s.success?(a.info("payment:success",{tool:"pay",amount:t.amount,merchant:t.merchantName,rail:s.receipt?.rail}),s.receipt&&Nn(s.receipt)):a.warn("payment:declined",{tool:"pay",amount:t.amount,merchant:t.merchantName,message:s.message}),s})}catch(n){if(n instanceof b)return a.warn("payment:declined",{tool:"pay",amount:t.amount,merchant:t.merchantName,code:n.code,retryable:n.retryable}),P(n,t);throw a.error("payment:failure",{tool:"pay",amount:t.amount,merchant:t.merchantName,error:n.message}),n}}async function en(r,e){if(!r.prompt||!r.prompt.trim())throw new Error("A prompt is required. Provide a description of what you want to generate.");let t=await N("generate_image_card",void 0,e);a.info("payment:attempt",{tool:"generate_image_card",amount:t.amount,merchant:t.merchantName});try{return await E(async()=>{let n=await v("generate_image_card",t.amount,t.merchantName,H(t)),s=await m.shortcut("generate_image_card",{...r,attestation:n},12e4,e);return a.info("payment:success",{tool:"generate_image_card",amount:t.amount,merchant:t.merchantName}),s.urls?.length?(s.urls.forEach(o=>C(o)),ge({prompt:r.prompt,tool:"generate_image_card",mediaUrl:s.urls[0],mediaType:"image",cost:s.amount??t.amount,transactionId:s.transactionId,userContext:e})):a.warn("generation:no-urls",{tool:"generate_image_card",resultKeys:Object.keys(s||{})}),s})}catch(n){if(n instanceof b)return a.warn("payment:declined",{tool:"generate_image_card",amount:t.amount,merchant:t.merchantName,code:n.code,retryable:n.retryable}),P(n,t);throw a.error("payment:failure",{tool:"generate_image_card",amount:t.amount,merchant:t.merchantName,error:n.message}),n}}async function tn(r,e){if(!r.prompt||!r.prompt.trim())throw new Error("A prompt is required. Provide a description of what you want to generate.");let t=await N("generate_image_fast_card",void 0,e);a.info("payment:attempt",{tool:"generate_image_fast_card",amount:t.amount,merchant:t.merchantName});try{return await E(async()=>{let n=await v("generate_image_fast_card",t.amount,t.merchantName,H(t)),s=await m.shortcut("generate_image_fast_card",{...r,attestation:n},6e4,e);return a.info("payment:success",{tool:"generate_image_fast_card",amount:t.amount,merchant:t.merchantName}),s.urls?.length?(s.urls.forEach(o=>C(o)),ge({prompt:r.prompt,tool:"generate_image_fast_card",mediaUrl:s.urls[0],mediaType:"image",cost:s.amount??t.amount,transactionId:s.transactionId,userContext:e})):a.warn("generation:no-urls",{tool:"generate_image_fast_card",resultKeys:Object.keys(s||{})}),s})}catch(n){if(n instanceof b)return a.warn("payment:declined",{tool:"generate_image_fast_card",amount:t.amount,merchant:t.merchantName,code:n.code,retryable:n.retryable}),P(n,t);throw a.error("payment:failure",{tool:"generate_image_fast_card",amount:t.amount,merchant:t.merchantName,error:n.message}),n}}async function rn(r,e){if(!r.prompt||!r.prompt.trim())throw new Error("A prompt is required. Provide a description of what you want to generate.");let t=await N("generate_video_tempo_card",void 0,e);a.info("payment:attempt",{tool:"generate_video_tempo_card",amount:t.amount,merchant:t.merchantName});try{return await E(async()=>{let n=await v("generate_video_tempo_card",t.amount,t.merchantName,H(t)),s=await m.shortcut("generate_video_tempo_card",{...r,attestation:n},12e4,e);return a.info("payment:success",{tool:"generate_video_tempo_card",amount:t.amount,merchant:t.merchantName}),s.urls?.length?(s.urls.forEach(o=>C(o)),ge({prompt:r.prompt,tool:"generate_video_tempo_card",mediaUrl:s.urls[0],mediaType:"video",cost:s.amount??t.amount,transactionId:s.transactionId,userContext:e})):a.warn("generation:no-urls",{tool:"generate_video_tempo_card",resultKeys:Object.keys(s||{})}),s})}catch(n){if(n instanceof b)return a.warn("payment:declined",{tool:"generate_video_tempo_card",amount:t.amount,merchant:t.merchantName,code:n.code,retryable:n.retryable}),P(n,t);throw a.error("payment:failure",{tool:"generate_video_tempo_card",amount:t.amount,merchant:t.merchantName,error:n.message}),n}}async function nn(r,e){if(!r.prompt||!r.prompt.trim())throw new Error("A prompt is required. Provide a description of what you want to generate.");let t=await N("generate_music_tempo_card",void 0,e);a.info("payment:attempt",{tool:"generate_music_tempo_card",amount:t.amount,merchant:t.merchantName});try{return await E(async()=>{let n=await v("generate_music_tempo_card",t.amount,t.merchantName,H(t)),s=await m.shortcut("generate_music_tempo_card",{...r,attestation:n},36e4,e);return a.info("payment:success",{tool:"generate_music_tempo_card",amount:t.amount,merchant:t.merchantName}),s.urls?.length&&s.status!=="processing"?(s.urls.forEach(o=>C(o)),ge({prompt:r.prompt,tool:"generate_music_tempo_card",mediaUrl:s.urls[0],mediaType:"audio",cost:s.amount??t.amount,transactionId:s.transactionId,userContext:e})):s.urls?.length&&s.status==="processing"?(s._preliminary_urls=s.urls,delete s.urls,a.info("generation:processing",{tool:"generate_music_tempo_card",note:"URLs withheld until status is completed"})):a.warn("generation:no-urls",{tool:"generate_music_tempo_card",resultKeys:Object.keys(s||{})}),s})}catch(n){if(n instanceof b)return a.warn("payment:declined",{tool:"generate_music_tempo_card",amount:t.amount,merchant:t.merchantName,code:n.code,retryable:n.retryable}),P(n,t);throw a.error("payment:failure",{tool:"generate_music_tempo_card",amount:t.amount,merchant:t.merchantName,error:n.message}),n}}async function sn(r,e){let t=await N("check_music_status_tempo_card",void 0,e);a.info("payment:attempt",{tool:"check_music_status_tempo_card",amount:t.amount,merchant:t.merchantName});try{return await E(async()=>{let n=await v("check_music_status_tempo_card",t.amount,t.merchantName,H(t)),s=await m.shortcut("check_music_status_tempo_card",{...r,attestation:n},void 0,e);return a.info("payment:success",{tool:"check_music_status_tempo_card",amount:t.amount,merchant:t.merchantName}),s.urls?.length&&s.urls.forEach(o=>C(o)),s})}catch(n){if(n instanceof b)return a.warn("payment:declined",{tool:"check_music_status_tempo_card",amount:t.amount,merchant:t.merchantName,code:n.code,retryable:n.retryable}),P(n,t);throw a.error("payment:failure",{tool:"check_music_status_tempo_card",amount:t.amount,merchant:t.merchantName,error:n.message}),n}}async function on(r,e){if(!r.chain||!r.chain.trim())throw new Error('A chain is required (e.g., "ethereum", "solana").');if(!r.token_address||!r.token_address.trim())throw new Error("A token address is required. Provide the contract address for the token.");let t=await N("query_onchain_prices_card",void 0,e);a.info("payment:attempt",{tool:"query_onchain_prices_card",amount:t.amount,merchant:t.merchantName});try{return await E(async()=>{let n=await v("query_onchain_prices_card",t.amount,t.merchantName,H(t)),s=await m.shortcut("query_onchain_prices_card",{...r,attestation:n},void 0,e);if(a.info("payment:success",{tool:"query_onchain_prices_card",amount:t.amount,merchant:t.merchantName}),Array.isArray(s?.data))s.data=s.data.map(o=>{if("mint"in o&&!("address"in o)){let{mint:i,...u}=o;return{address:i,...u}}return o});else if(s&&"mint"in s&&!("address"in s)){let{mint:o,...i}=s;return{address:o,...i}}return s})}catch(n){if(n instanceof b)return a.warn("payment:declined",{tool:"query_onchain_prices_card",amount:t.amount,merchant:t.merchantName,code:n.code,retryable:n.retryable}),P(n,t);throw a.error("payment:failure",{tool:"query_onchain_prices_card",amount:t.amount,merchant:t.merchantName,error:n.message}),n}}async function an(r,e){if(!r.prompt||!r.prompt.trim())throw new Error("A prompt is required. Provide a natural language question about blockchain data.");let t=await N("allium_explorer_card",void 0,e);a.info("payment:attempt",{tool:"allium_explorer_card",amount:t.amount,merchant:t.merchantName});try{return await E(async()=>{let n=await v("allium_explorer_card",t.amount,t.merchantName,H(t)),s=await m.shortcut("allium_explorer_card",{...r,attestation:n},12e4,e);return a.info("payment:success",{tool:"allium_explorer_card",amount:t.amount,merchant:t.merchantName}),s})}catch(n){if(n instanceof b)return a.warn("payment:declined",{tool:"allium_explorer_card",amount:t.amount,merchant:t.merchantName,code:n.code,retryable:n.retryable}),P(n,t);throw a.error("payment:failure",{tool:"allium_explorer_card",amount:t.amount,merchant:t.merchantName,error:n.message}),n}}async function cn(r,e){if(!r.session_id||!r.session_id.trim())throw new Error("A session_id is required. Use the session_id returned from allium_explorer_card.");let t=await N("allium_explorer_results_card",void 0,e);a.info("payment:attempt",{tool:"allium_explorer_results_card",amount:t.amount,pricingMode:t.pricingMode,estimatedAmount:t.estimatedAmount,merchant:t.merchantName});try{return await E(async()=>{let n=await v("allium_explorer_results_card",t.amount,t.merchantName,H(t)),s=await m.shortcut("allium_explorer_results_card",{...r,attestation:n},6e4,e);a.info("payment:success",{tool:"allium_explorer_results_card",amount:t.amount,actualCost:s?.actualCost,merchant:t.merchantName});let o=typeof s?.data?.results=="string"?s.data.results:void 0;if(o&&Buffer.byteLength(o)>Gr){let i=Xr(r.session_id,o),{results:u,...l}=s.data;return{...s,data:{...l,...i}}}return s})}catch(n){if(n instanceof b)return a.warn("payment:declined",{tool:"allium_explorer_results_card",amount:t.amount,merchant:t.merchantName,code:n.code,retryable:n.retryable}),P(n,t);throw a.error("payment:failure",{tool:"allium_explorer_results_card",amount:t.amount,merchant:t.merchantName,error:n.message}),n}}var de="https://pxlwall.com";async function un(r){if([r.shape,r.text,r.pixels].filter(Boolean).length>1)throw new Error("Provide only one of: shape, text, or pixels. Cannot combine modes.");let t,n,s=r.position||"cheapest";if(typeof s=="string"&&s.startsWith("{"))try{s=JSON.parse(s)}catch{}if(r.shape)t=`${de}/api/agent/draw-shape`,n={shape:r.shape,color:r.color||"#ffffff",owner:r.owner,position:s},r.shape==="circle"?n.radius=r.size||10:r.shape==="rectangle"?(n.width=r.width||20,n.height=r.height||10):n.size=r.size||10;else if(r.text)t=`${de}/api/agent/draw-text`,n={text:r.text,color:r.color||"#ffffff",owner:r.owner,position:s};else if(r.pixels){if(r.pixels.length<100)throw new Error(`Minimum 100 pixels per purchase. You requested ${r.pixels.length}.`);for(let i of r.pixels)if(i.x<0||i.x>499||i.y<0||i.y>499)throw new Error(`Pixel (${i.x},${i.y}) is out of bounds. Grid is 500x500 (coordinates 0-499).`);t=`${de}/api/create-purchase-spec`,n={pixels:r.pixels,color:r.color||"#ffffff",owner:r.owner},r.colors&&(n.colors=r.colors)}else throw new Error("Provide one of: shape, text, or pixels.");let o=await fetch(t,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(n),signal:AbortSignal.timeout(15e3)});if(!o.ok){let i=await o.text().catch(()=>"");throw new Error(`pxlwall spec creation failed (${o.status}): ${i}`)}return o.json()}async function ln(r,e){let t=await un(r),n=t.pixels?.length??r.pixels?.length??0,s="pxlwall";a.info("payment:attempt",{tool:"pxlwall_card",amount:t.totalUSD,pixelCount:n,merchant:s});try{let o=await v("pxlwall_card",t.totalUSD,s,`pay $${t.totalUSD.toFixed(2)} to ${s} for ${n} pixels`),i=await m.shortcut("pxlwall_card",{specId:t.specId,attestation:o},6e4,e);return a.info("payment:success",{tool:"pxlwall_card",merchant:s}),C(de),i.urls?.length&&i.urls.forEach(u=>C(u)),{...i,specId:t.specId,pixelCount:n,totalUSD:t.totalUSD,canvasUrl:de}}catch(o){if(o instanceof b)return a.warn("payment:declined",{tool:"pxlwall_card",merchant:s,code:o.code,retryable:o.retryable}),P(o,{amount:0,merchantName:s});throw a.error("payment:failure",{tool:"pxlwall_card",merchant:s,error:o.message}),o}}var dn=["generate_music_tempo_card"],mn=36e4,pn=18e4,fn=15e3,gn=12e4,hn=2e3;async function yn(r,e){let t;if(r.requests?.some(d=>d.tool||d.tool_id)&&r.requests)t=r.requests.map(d=>{let w=d.tool||d.tool_id||r.tool;if(!w)throw new Error("Each request must specify tool or tool_id, or set tool at the top level.");let _=Pe(w,d.tier||r.tier),{tool:L,tool_id:te,tier:ss,...dr}=d;return{resolvedTool:_,params:dr}});else if(r.tool){let d=Pe(r.tool,r.tier);t=(r.requests||(r.count&&r.params?Array.from({length:r.count},()=>({...r.params})):[])).map(_=>({resolvedTool:d,params:_}))}else throw new Error("Batch requires a top-level tool or per-request tool/tool_id.");if(t.length===0)throw new Error("Batch requires at least one item.");let s=[...new Set(t.map(d=>d.resolvedTool))],o=s.length===1,i={};for(let d of s)i[d]=await N(d,void 0,e);let u=0;for(let d of t)u+=i[d.resolvedTool].amount;let l=[...new Set(Object.values(i).map(d=>d.merchantName))].join(", "),c=o?s[0]:"mixed";a.info("payment:attempt",{tool:"batch",batchTool:c,count:t.length,totalAmount:u,merchant:l,heterogeneous:!o});let p=o?`pay $${u.toFixed(2)} to ${l} (${t.length} items, $${i[s[0]].amount.toFixed(2)} each)`:`pay $${u.toFixed(2)} to ${l} (${t.length} items across ${s.length} tools)`,h=o?t.map(d=>d.params):t.map(d=>({tool_id:d.resolvedTool,...d.params})),S=t.some(d=>dn.includes(d.resolvedTool)),T=t.some(d=>d.resolvedTool.startsWith("or-")||d.resolvedTool==="run_llm"||d.resolvedTool==="execute_tool"),$=S?mn:T?pn+t.length*fn:gn+t.length*hn;try{return await E(async()=>{let d=await v(`batch:${c}`,u,l,p),w=await m.batch({tool:o?s[0]:c,requests:h,attestation:d,idempotencyKey:me.randomUUID()},$,e);return a.info("payment:success",{tool:"batch",batchTool:c,count:t.length,totalAmount:u,merchant:l}),w.results&&w.results.forEach(_=>{_.urls&&_.urls.forEach(L=>C(L))}),w})}catch(d){if(d instanceof b)return a.warn("payment:declined",{tool:"batch",batchTool:c,count:t.length,totalAmount:u,merchant:l,code:d.code,retryable:d.retryable}),P(d,{amount:u,merchantName:l});throw a.error("payment:failure",{tool:"batch",batchTool:c,count:t.length,totalAmount:u,merchant:l,error:d.message}),d}}function _n(){try{let r=fe.join(pe.homedir(),".claude","settings.json");if(!O.existsSync(r))return{enabled:!1,setup:"visa-cli hud enable"};let e=JSON.parse(O.readFileSync(r,"utf-8")),t=typeof e.statusLine=="object"?e.statusLine.command:"";return Le(t)?{enabled:!0}:e.statusLine?{enabled:!1,setup:"Another HUD is active. To switch: edit ~/.claude/settings.json \u2192 statusLine"}:{enabled:!1,setup:"visa-cli hud enable"}}catch{return{enabled:!1,setup:"visa-cli hud enable"}}}async function wn(r){let e=await m.getStatus(r);typeof e?.dailyRemaining=="number"&&(e.dailyRemaining=Math.round(e.dailyRemaining*100)/100);let t=Qr();return t.file_count>0&&(e.alliumResultsOnDisk=t),e.hud=_n(),e.version=Fr,e}async function bn(r){let t=(await m.getStatus(r)).cards||[];return t.length===0?{cards:[],message:"No cards enrolled. Use the add_card tool to add a payment card."}:t.some(s=>!Number.isInteger(s?.id)||s.id<=0)?{success:!1,cards:[],message:"Card ids are unavailable right now, so remove_card and set_default_card are temporarily disabled."}:{cards:t}}async function vn(r){let e=await m.getTransactions(r);return Array.isArray(e?.transactions)&&(e.transactions=e.transactions.filter(t=>!(t.tool_name==null||t.amount===0&&t.status==="failed"))),e}async function Sn(r,e){return await m.feedback(r.message,r.transaction_id,e)}async function kn(r,e){if(!r.confirm)return{success:!1,message:"Please confirm by setting confirm: true to update spending controls."};a.info("spending_controls:update",{maxTransactionAmount:r.maxTransactionAmount,dailyLimit:r.dailyLimit});try{return await E(async()=>{let t=await v("spending-controls",0,"","update spending controls"),n=await m.updateSpendingControls({maxTransactionAmount:r.maxTransactionAmount,dailyLimit:r.dailyLimit,confirm:!0,attestation:t},e);return a.info("spending_controls:success",{maxTransactionAmount:r.maxTransactionAmount,dailyLimit:r.dailyLimit}),n})}catch(t){throw a.error("spending_controls:failure",{error:t.message}),t}}async function Tn(r){let e=await Ft({api:m,includeDev:!!r.includeDev});return{config:e.entries.map(t=>({key:t.key,value:t.value,source:t.source,hint:t.hint})),statusError:e.statusError}}async function En(r){if(!r.key||typeof r.key!="string")return{success:!1,error:"key is required. Call config_list first to see available keys."};if(r.value===void 0)return{success:!1,error:"value is required. Use config_unset to remove a setting."};a.info("config:set",{key:r.key});try{let e=ht(r.key,r.value);return a.info("config:set:success",{key:e.key,requiresRestart:e.requiresRestart}),{success:!0,key:e.key,value:e.value,requiresRestart:e.requiresRestart,path:e.path,message:e.requiresRestart?`Saved ${e.key}. Restart Claude Code for the change to take effect.`:`Saved ${e.key}.`}}catch(e){let t=e instanceof J?"UNKNOWN_KEY":e instanceof Y?"SERVER_CONTROLLED":"INVALID_VALUE";return a.warn("config:set:rejected",{key:r.key,code:t,error:e.message}),{success:!1,error:e.message,code:t,settableKeys:Object.keys(re).sort()}}}async function xn(r){if(!r.key||typeof r.key!="string")return{success:!1,error:"key is required. Call config_list first to see which keys are currently set via settings.json."};a.info("config:unset",{key:r.key});try{let e=yt(r.key);return a.info("config:unset:success",{key:e.key,removed:e.removed}),{success:!0,key:e.key,removed:e.removed,requiresRestart:e.requiresRestart,path:e.path,message:e.removed?e.requiresRestart?`Removed ${e.key}. Restart Claude Code for the change to take effect.`:`Removed ${e.key}.`:`${e.key} was not set in settings.json \u2014 nothing to remove.`}}catch(e){let t=e instanceof J?"UNKNOWN_KEY":e instanceof Y?"SERVER_CONTROLLED":"INVALID_VALUE";return a.warn("config:unset:rejected",{key:r.key,code:t,error:e.message}),{success:!1,error:e.message,code:t,settableKeys:Object.keys(re).sort()}}}async function Rn(r){let e=await m.getStatus(r),t=e.attestationRequired!==!1;return{required:t,hasAttestationKey:!!e.hasAttestationKey,touchIdAvailable:F(),message:t?"Touch ID is REQUIRED for payments.":"Touch ID is NOT required for payments. Payments will proceed without biometric confirmation."}}async function In(r){a.info("biometric:on");let e=await m.setBiometricPreference({required:!0},r);return e.success?(Gt(),{success:!0,required:!0,message:"Touch ID is now REQUIRED for payments."}):{success:!1,error:e.error||"unknown error"}}async function An(r,e){if(!r.confirm)return{success:!1,message:"Please confirm by setting confirm: true. Disabling Touch ID is a security downgrade \u2014 the user will be prompted for one final Touch ID confirmation before the change takes effect."};a.info("biometric:off");try{return await E(async()=>{let t=await m.getStatus(e),n;if(t.hasAttestationKey&&(n=await v("biometric-preference",0,"","disable Touch ID requirement"),!n))throw new Error("Touch ID confirmation required to disable \u2014 not available on this device.");let s=await m.setBiometricPreference({required:!1,attestation:n},e);if(!s.success)throw new Error(s.error||"unknown error");return Gt(),{success:!0,required:!1,message:"Touch ID is no longer required for payments."}})}catch(t){throw a.error("biometric:off:failure",{error:t.message}),t}}var Bt=3e4,Cn=3e5;async function Yt(r,e){let t=me.randomBytes(16).toString("hex"),n=`${r}${r.includes("?")?"&":"?"}state=${t}`;C(n);let s=Date.now()+Cn;for(;Date.now()<s;)try{let o=await fetch(`${Ue()}/v1/auth-status`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({state:t,timeout:Bt,...e&&{user_context:e}}),signal:AbortSignal.timeout(Bt+5e3)});if(!o.ok)continue;let i=await o.json();if(i.status==="pending")continue;if(i.status==="expired")return{success:!1,message:"Session expired. Please try again."};if(i.status==="error")return{success:!1,message:i.error||"Authentication failed. Please try again."};if(i.status==="complete"){if(i.sessionToken){await I.saveSessionToken(i.sessionToken);let l=i.user||"",c=i.last4||"****";return a.info("auth:login_complete",{user:l,last4:c}),{success:!0,message:`Signed in as ${l}. Card ending in ${c} added.${Kt}`}}let u=i.last4||"****";return a.info("auth:card_added",{last4:u}),{success:!0,message:`Card ending in ${u} enrolled.${Kt}`}}}catch{}return{success:!1,message:"Login timed out. Please try again."}}async function On(r,e){if(!r.confirm)return{success:!1,message:"Please confirm by setting confirm: true to remove this card."};let t=r.cardId;if(!Number.isInteger(t)||t<=0)return{success:!1,message:"cardId must be a positive integer. Call get_cards to list enrolled cards and their ids."};a.info("cards:remove_attempt",{cardId:t});let n=`remove-card:${t}`,s=`remove enrolled card #${t}`;try{return await E(async()=>{let o=await v(n,0,"",s),i=await m.removeCard(t,{attestation:o},e);return a.info("cards:remove_success",{cardId:t,promotedId:i?.promotedId??null}),i})}catch(o){throw a.error("cards:remove_failure",{cardId:t,error:o.message}),o}}async function Pn(r,e){let t=r.cardId;if(!Number.isInteger(t)||t<=0)return{success:!1,message:"cardId must be a positive integer. Call get_cards to list enrolled cards and their ids."};a.info("cards:set_default_attempt",{cardId:t});let n=`set-default-card:${t}`,s=`set card #${t} as default`;try{return await E(async()=>{let o=await v(n,0,"",s),i=await m.setDefaultCard(t,{attestation:o},e);return a.info("cards:set_default_success",{cardId:t}),i})}catch(o){throw a.error("cards:set_default_failure",{cardId:t,error:o.message}),o}}async function Ln(r){return a.info("auth:login_attempt"),Yt(`${Ue()}/login`,r)}async function qn(r){return a.info("auth:add_card_attempt"),await I.getSessionToken()?Yt(`${Ue()}/enroll`,r):{success:!1,message:"Not logged in. Sign up at https://visacli.sh or call the login tool first."}}async function Un(r,e){if(!r.confirm)return{success:!1,message:"Please confirm by setting confirm: true to reset"};a.info("reset:attempt");let t=await v("reset",0,"","reset device and remove all credentials");try{await m.logout({attestation:t},e)}catch{}if(await I.clearAll(),F())try{await Pt()}catch{}return a.info("reset:success"),{success:!0,message:"Device reset. All credentials, cards, and keys have been removed. Use the login tool to re-enroll."}}function Nn(r){let e=["url","resultUrl","imageUrl","audioUrl","trackUrl"];for(let t of e){let n=r[t];n&&typeof n=="string"&&n.startsWith("http")&&C(n)}Array.isArray(r.urls)&&r.urls.forEach(t=>{t&&typeof t=="string"&&t.startsWith("http")&&C(t)})}async function $n(r){if(!r.query&&!r.category)throw new Error("Provide a query (what you want to do) or category (image, video, audio, 3d, llm) to search the tool catalog.");a.info("catalog:discover",{query:r.query,category:r.category});try{let t=(await m.catalogSearch(r.query,r.category)).tools||[];if(t.length===0)return{content:[{type:"text",text:`No tools found for "${r.query||r.category}". Try a different search term.`}]};let n=t.map((s,o)=>`${o+1}. **${s.name}** (${s.id})
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@visa/cli",
3
- "version": "1.11.0-rc.3",
3
+ "version": "1.11.0-rc.4",
4
4
  "description": "AI-powered payments for Claude Code",
5
5
  "bin": {
6
6
  "visa-cli": "./bin/visa-cli.js"