@visa/cli 1.5.1-rc.0 → 1.6.0-rc.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/dist/cli.js CHANGED
@@ -1,7 +1,7 @@
1
- "use strict";var In=Object.create;var mt=Object.defineProperty;var Mn=Object.getOwnPropertyDescriptor;var jn=Object.getOwnPropertyNames;var On=Object.getPrototypeOf,Dn=Object.prototype.hasOwnProperty;var Hn=(e,t)=>()=>(t||e((t={exports:{}}).exports,t),t.exports);var Un=(e,t,n,r)=>{if(t&&typeof t=="object"||typeof t=="function")for(let s of jn(t))!Dn.call(e,s)&&s!==n&&mt(e,s,{get:()=>t[s],enumerable:!(r=Mn(t,s))||r.enumerable});return e};var g=(e,t,n)=>(n=e!=null?In(On(e)):{},Un(t||!e||!e.__esModule?mt(n,"default",{value:e,enumerable:!0}):n,e));var Be=Hn((us,Zn)=>{Zn.exports={name:"@visa/cli",version:"1.5.1-rc.0",description:"AI-powered payments for Claude Code",bin:{"visa-cli":"./bin/visa-cli.js"},scripts:{build:"tsc --noEmit && node esbuild.config.js",dev:"tsc --watch",start:"node dist/mcp-server/index.js",test:"jest --config jest.config.js","test:unit":"jest --config jest.config.js","test:unit:watch":"jest --config jest.config.js --watch","test:unit:coverage":"jest --config jest.config.js --coverage","test:smoke":"VISA_AUTH_URL=https://auth.visacli.sh jest --config jest.smoke.config.js","test:integration":"jest --config jest.integration.config.js","test:e2e":"jest --config jest.e2e.config.js","test:catalog-e2e":"jest --config jest.catalog-e2e.config.js","test:all":"npm run test:unit && npm run test:integration && npm run test:e2e",prepublishOnly:"npm run build && npm test",lint:"eslint src/**/*.ts",format:'prettier --write "src/**/*.ts"',"format:check":'prettier --check "src/**/*.ts"'},keywords:["visa","checkout","mcp","ai-agent","payments","click-to-pay","usdc","stablecoin"],author:"Visa Crypto Labs",license:"SEE LICENSE IN LICENSE",dependencies:{"@modelcontextprotocol/sdk":"^1.0.0",commander:"^12.1.0",zod:"^3.23.0"},devDependencies:{"@visa-cli/tools":"workspace:*","@changesets/changelog-git":"^0.2.1","@changesets/cli":"^2.30.0","@types/jest":"^30.0.0","@types/node":"^25.6.0","@typescript-eslint/eslint-plugin":"^8.59.0","@typescript-eslint/parser":"^8.59.0","@types/express":"^5.0.0",esbuild:"^0.27.4",express:"^4.21.0",eslint:"^10.0.2","eslint-config-prettier":"^10.1.8",jest:"^29.7.0",prettier:"^3.8.3","ts-jest":"^29.2.0",typescript:"^5.7.0"},engines:{node:">=18.0.0"},mcpName:"io.github.visa-crypto-labs/visa-cli",files:["bin/visa-cli.js","dist/","install.ps1","native/visa-keychain.m","server.json","README.md","LICENSE"]}});var xn=require("commander"),Me=g(require("crypto")),kn=g(require("fs")),I=g(require("os")),fe=g(require("path")),Pn=g(require("readline")),En=require("child_process"),Rn=require("util");var ge=require("child_process"),gt=require("util"),q=g(require("fs")),he=g(require("os")),Ue=g(require("path")),j=(0,gt.promisify)(ge.execFile),Ve=Ue.join(he.homedir(),".visa-mcp"),pe=Ue.join(Ve,"session-token"),L="visa-cli",K="session-token",me="rc-access",Vn=5e3;async function Fn(){try{let{stdout:e}=await j("security",["find-generic-password","-s",L,"-a",K,"-w"],{timeout:5e3});return e.trim()||null}catch{return null}}async function Bn(e){try{try{await j("security",["delete-generic-password","-s",L,"-a",K],{timeout:5e3})}catch{}return await j("security",["add-generic-password","-s",L,"-a",K,"-w",e],{timeout:5e3}),!0}catch{return!1}}async function Kn(){try{await j("security",["delete-generic-password","-s",L,"-a",K],{timeout:5e3})}catch{}}async function qn(){if(!Fe())return null;try{let{stdout:e}=await j("secret-tool",["lookup","service",L,"account",K],{timeout:5e3});return e.trim()||null}catch{return null}}async function Gn(e){if(!Fe())return!1;try{let t=(0,ge.execFile)("secret-tool",["store","--label",`${L} ${K}`,"service",L,"account",K]);return t.stdin?(t.stdin.write(e),t.stdin.end(),await Promise.race([new Promise((n,r)=>{t.on("exit",s=>s===0?n():r(new Error(`secret-tool exited ${s}`))),t.on("error",r)}),new Promise((n,r)=>setTimeout(()=>{t.kill(),r(new Error("secret-tool timed out"))},Vn))]),!0):!1}catch{return!1}}async function Wn(){if(Fe())try{await j("secret-tool",["clear","service",L,"account",K],{timeout:5e3})}catch{}}function Fe(){return!!process.env.DBUS_SESSION_BUS_ADDRESS}async function Jn(){try{let{stdout:e}=await j("security",["find-generic-password","-s",L,"-a",me,"-w"],{timeout:5e3});return e.trim()||null}catch{return null}}async function zn(e){try{try{await j("security",["delete-generic-password","-s",L,"-a",me],{timeout:5e3})}catch{}await j("security",["add-generic-password","-s",L,"-a",me,"-w",e],{timeout:5e3})}catch{}}async function Yn(){try{await j("security",["delete-generic-password","-s",L,"-a",me],{timeout:5e3})}catch{}}function De(){try{return q.readFileSync(pe,"utf-8").trim()||null}catch{return null}}function ht(e){q.mkdirSync(Ve,{recursive:!0,mode:448}),q.writeFileSync(pe,e,{mode:384}),process.platform==="win32"&&Xn(pe)}function He(){try{q.unlinkSync(pe)}catch{}}function Xn(e){try{let t=he.userInfo().username;(0,ge.execFile)("icacls",[e,"/inheritance:r","/grant:r",`${t}:F`],{timeout:5e3},n=>{n&&console.error(`[visa-cli] icacls ACL restriction failed: ${n.message}`)})}catch(t){console.error(`[visa-cli] Failed to invoke icacls: ${t instanceof Error?t.message:String(t)}`)}}function Oe(){switch(process.platform){case"darwin":return{get:Fn,store:Bn,delete:Kn};case"linux":return{get:qn,store:Gn,delete:Wn};default:return{get:async()=>De(),store:async e=>{try{return ht(e),!0}catch{return!1}},delete:async()=>He()}}}var $=class{static async getSessionToken(){if(process.env.VISA_MOCK_KEYCHAIN==="true")return Promise.resolve("mock-session-token-for-testing");let t=Oe(),n=await t.get();if(n)return n;let r=De();return r?(await t.store(r),r):null}static async saveSessionToken(t){if(process.env.VISA_MOCK_KEYCHAIN==="true")return;let n=Oe();if(await n.store(t)){if(await n.get()===t){He();return}await n.delete()}if(ht(t),De()!==t)throw new Error("Failed to persist session token. "+(process.platform==="darwin"?'Check Keychain Access permissions for "visa-cli".':`Ensure ${Ve} is writable.`))}static async getRcAccessToken(){return process.env.VISA_MOCK_KEYCHAIN==="true"?"mock-rc-token-for-testing":Jn()}static async saveRcAccessToken(t){process.env.VISA_MOCK_KEYCHAIN!=="true"&&await zn(t)}static async deleteSessionToken(){if(process.env.VISA_MOCK_KEYCHAIN==="true")return;await Oe().delete(),He()}static async clearAll(){await this.deleteSessionToken(),await Yn()}};var ye=g(require("crypto")),Se=g(require("tty")),ve=g(require("fs"));var z="6820f6e91b762e645c9bf020c0d3673bb99d4a25a824880c0d548e10bb9bc7b1";function Qn(e){return/-rc\.|-beta\./.test(e)}function Ke(e){return ye.createHash("sha256").update(e.trim()).digest("hex")}function yt(e){return z==="SKIP"?!0:ye.timingSafeEqual(Buffer.from(Ke(e)),Buffer.from(z))}function er(e){return new Promise((t,n)=>{let r=ve.openSync("/dev/tty","r+"),s=new Se.ReadStream(r),o=new Se.WriteStream(r),i=()=>{try{s.destroy()}catch{}try{o.destroy()}catch{}try{ve.closeSync(r)}catch{}};o.write(e),s.setRawMode(!0),s.resume(),s.setEncoding("utf8");let a="";s.on("data",c=>{c==="\r"||c===`
1
+ "use strict";var Dn=Object.create;var ht=Object.defineProperty;var Mn=Object.getOwnPropertyDescriptor;var On=Object.getOwnPropertyNames;var jn=Object.getPrototypeOf,Un=Object.prototype.hasOwnProperty;var Hn=(e,t)=>()=>(t||e((t={exports:{}}).exports,t),t.exports);var Vn=(e,t,n,r)=>{if(t&&typeof t=="object"||typeof t=="function")for(let s of On(t))!Un.call(e,s)&&s!==n&&ht(e,s,{get:()=>t[s],enumerable:!(r=Mn(t,s))||r.enumerable});return e};var g=(e,t,n)=>(n=e!=null?Dn(jn(e)):{},Vn(t||!e||!e.__esModule?ht(n,"default",{value:e,enumerable:!0}):n,e));var Be=Hn((ds,Qn)=>{Qn.exports={name:"@visa/cli",version:"1.6.0-rc.1",description:"AI-powered payments for Claude Code",bin:{"visa-cli":"./bin/visa-cli.js"},scripts:{build:"tsc --noEmit && node esbuild.config.js",dev:"tsc --watch",start:"node dist/mcp-server/index.js",test:"jest --config jest.config.js","test:unit":"jest --config jest.config.js","test:unit:watch":"jest --config jest.config.js --watch","test:unit:coverage":"jest --config jest.config.js --coverage","test:smoke":"VISA_AUTH_URL=https://auth.visacli.sh jest --config jest.smoke.config.js","test:integration":"jest --config jest.integration.config.js","test:e2e":"jest --config jest.e2e.config.js","test:catalog-e2e":"jest --config jest.catalog-e2e.config.js","test:all":"npm run test:unit && npm run test:integration && npm run test:e2e",prepublishOnly:"npm run build && npm test",lint:"eslint src/**/*.ts",format:'prettier --write "src/**/*.ts"',"format:check":'prettier --check "src/**/*.ts"'},keywords:["visa","checkout","mcp","ai-agent","payments","click-to-pay","usdc","stablecoin"],author:"Visa Crypto Labs",license:"SEE LICENSE IN LICENSE",dependencies:{"@modelcontextprotocol/sdk":"^1.0.0",commander:"^12.1.0",zod:"^3.23.0"},devDependencies:{"@visa-cli/tools":"workspace:*","@changesets/changelog-git":"^0.2.1","@changesets/cli":"^2.30.0","@types/jest":"^30.0.0","@types/node":"^25.6.0","@typescript-eslint/eslint-plugin":"^8.59.0","@typescript-eslint/parser":"^8.59.0","@types/express":"^5.0.0",esbuild:"^0.27.4",express:"^4.21.0",eslint:"^10.0.2","eslint-config-prettier":"^10.1.8",jest:"^29.7.0",prettier:"^3.8.3","ts-jest":"^29.2.0",typescript:"^5.7.0"},engines:{node:">=18.0.0"},mcpName:"io.github.visa-crypto-labs/visa-cli",files:["bin/visa-cli.js","dist/","install.ps1","native/visa-keychain.m","server.json","README.md","LICENSE"]}});var kn=require("commander"),De=g(require("crypto")),Pn=g(require("fs")),N=g(require("os")),fe=g(require("path")),En=g(require("readline")),Tn=require("child_process"),Rn=require("util");var ge=require("child_process"),yt=require("util"),W=g(require("fs")),he=g(require("os")),He=g(require("path")),M=(0,yt.promisify)(ge.execFile),Ve=He.join(he.homedir(),".visa-mcp"),pe=He.join(Ve,"session-token"),L="visa-cli",G="session-token",me="rc-access",Fn=5e3;async function Bn(){try{let{stdout:e}=await M("security",["find-generic-password","-s",L,"-a",G,"-w"],{timeout:5e3});return e.trim()||null}catch{return null}}async function Kn(e){try{try{await M("security",["delete-generic-password","-s",L,"-a",G],{timeout:5e3})}catch{}return await M("security",["add-generic-password","-s",L,"-a",G,"-w",e],{timeout:5e3}),!0}catch{return!1}}async function qn(){try{await M("security",["delete-generic-password","-s",L,"-a",G],{timeout:5e3})}catch{}}async function Gn(){if(!Fe())return null;try{let{stdout:e}=await M("secret-tool",["lookup","service",L,"account",G],{timeout:5e3});return e.trim()||null}catch{return null}}async function Wn(e){if(!Fe())return!1;try{let t=(0,ge.execFile)("secret-tool",["store","--label",`${L} ${G}`,"service",L,"account",G]);return t.stdin?(t.stdin.write(e),t.stdin.end(),await Promise.race([new Promise((n,r)=>{t.on("exit",s=>s===0?n():r(new Error(`secret-tool exited ${s}`))),t.on("error",r)}),new Promise((n,r)=>setTimeout(()=>{t.kill(),r(new Error("secret-tool timed out"))},Fn))]),!0):!1}catch{return!1}}async function Jn(){if(Fe())try{await M("secret-tool",["clear","service",L,"account",G],{timeout:5e3})}catch{}}function Fe(){return!!process.env.DBUS_SESSION_BUS_ADDRESS}async function zn(){try{let{stdout:e}=await M("security",["find-generic-password","-s",L,"-a",me,"-w"],{timeout:5e3});return e.trim()||null}catch{return null}}async function Yn(e){try{try{await M("security",["delete-generic-password","-s",L,"-a",me],{timeout:5e3})}catch{}await M("security",["add-generic-password","-s",L,"-a",me,"-w",e],{timeout:5e3})}catch{}}async function Xn(){try{await M("security",["delete-generic-password","-s",L,"-a",me],{timeout:5e3})}catch{}}function je(){try{return W.readFileSync(pe,"utf-8").trim()||null}catch{return null}}function St(e){W.mkdirSync(Ve,{recursive:!0,mode:448}),W.writeFileSync(pe,e,{mode:384}),process.platform==="win32"&&Zn(pe)}function Ue(){try{W.unlinkSync(pe)}catch{}}function Zn(e){try{let t=he.userInfo().username;(0,ge.execFile)("icacls",[e,"/inheritance:r","/grant:r",`${t}:F`],{timeout:5e3},n=>{n&&console.error(`[visa-cli] icacls ACL restriction failed: ${n.message}`)})}catch(t){console.error(`[visa-cli] Failed to invoke icacls: ${t instanceof Error?t.message:String(t)}`)}}function Oe(){switch(process.platform){case"darwin":return{get:Bn,store:Kn,delete:qn};case"linux":return{get:Gn,store:Wn,delete:Jn};default:return{get:async()=>je(),store:async e=>{try{return St(e),!0}catch{return!1}},delete:async()=>Ue()}}}var $=class{static async getSessionToken(){if(process.env.VISA_MOCK_KEYCHAIN==="true")return Promise.resolve("mock-session-token-for-testing");let t=Oe(),n=await t.get();if(n)return n;let r=je();return r?(await t.store(r),r):null}static async saveSessionToken(t){if(process.env.VISA_MOCK_KEYCHAIN==="true")return;let n=Oe();if(await n.store(t)){if(await n.get()===t){Ue();return}await n.delete()}if(St(t),je()!==t)throw new Error("Failed to persist session token. "+(process.platform==="darwin"?'Check Keychain Access permissions for "visa-cli".':`Ensure ${Ve} is writable.`))}static async getRcAccessToken(){return process.env.VISA_MOCK_KEYCHAIN==="true"?"mock-rc-token-for-testing":zn()}static async saveRcAccessToken(t){process.env.VISA_MOCK_KEYCHAIN!=="true"&&await Yn(t)}static async deleteSessionToken(){if(process.env.VISA_MOCK_KEYCHAIN==="true")return;await Oe().delete(),Ue()}static async clearAll(){await this.deleteSessionToken(),await Xn()}};var ye=g(require("crypto")),Se=g(require("tty")),be=g(require("fs"));var X="6820f6e91b762e645c9bf020c0d3673bb99d4a25a824880c0d548e10bb9bc7b1";function er(e){return/-rc\.|-beta\./.test(e)}function Ke(e){return ye.createHash("sha256").update(e.trim()).digest("hex")}function bt(e){return X==="SKIP"?!0:ye.timingSafeEqual(Buffer.from(Ke(e)),Buffer.from(X))}function tr(e){return new Promise((t,n)=>{let r=be.openSync("/dev/tty","r+"),s=new Se.ReadStream(r),o=new Se.WriteStream(r),i=()=>{try{s.destroy()}catch{}try{o.destroy()}catch{}try{be.closeSync(r)}catch{}};o.write(e),s.setRawMode(!0),s.resume(),s.setEncoding("utf8");let a="";s.on("data",c=>{c==="\r"||c===`
2
2
  `?(o.write(`
3
3
  `),i(),t(a)):c===""?(o.write(`
4
- `),i(),n(new Error("Cancelled"))):c==="\x7F"||c==="\b"?a.length>0&&(a=a.slice(0,-1),o.write("\b \b")):(a+=c,o.write("\u2022"))})})}var tr=`
4
+ `),i(),n(new Error("Cancelled"))):c==="\x7F"||c==="\b"?a.length>0&&(a=a.slice(0,-1),o.write("\b \b")):(a+=c,o.write("\u2022"))})})}var nr=`
5
5
  \u2588\u2588\u2557 \u2588\u2588\u2557\u2588\u2588\u2557\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557 \u2588\u2588\u2588\u2588\u2588\u2557
6
6
  \u2588\u2588\u2551 \u2588\u2588\u2551\u2588\u2588\u2551\u2588\u2588\u2554\u2550\u2550\u2550\u2550\u255D\u2588\u2588\u2554\u2550\u2550\u2588\u2588\u2557
7
7
  \u2588\u2588\u2551 \u2588\u2588\u2551\u2588\u2588\u2551\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2551
@@ -10,26 +10,26 @@
10
10
  \u255A\u2550\u2550\u2550\u255D \u255A\u2550\u255D\u255A\u2550\u2550\u2550\u2550\u2550\u2550\u255D\u255A\u2550\u255D \u255A\u2550\u255D
11
11
 
12
12
  This is a Release Candidate build. Access is restricted to Visa employees.
13
- `;async function St(e={}){let t=e.version??Be().version;if(!Qn(t))return;let n=process.env.VISA_RC_CODE;if(n&&yt(n)){await $.saveRcAccessToken(Ke(n));return}if(e.isMcp??!1){let i=await $.getRcAccessToken();if(i&&(z==="SKIP"||i===z))return;process.stderr.write(`[visa-cli] RC build requires access. Run: visa-cli setup
14
- `),process.exit(1)}let s=await $.getRcAccessToken();if(s&&(z==="SKIP"||s===z))return;console.log(tr);let o=3;for(let i=1;i<=o;i++){let a;try{a=await er(" Enter RC access code: ")}catch{process.exit(1)}if(yt(a)){await $.saveRcAccessToken(Ke(a)),console.log(`
13
+ `;async function vt(e={}){let t=e.version??Be().version;if(!er(t))return;let n=process.env.VISA_RC_CODE;if(n&&bt(n)){await $.saveRcAccessToken(Ke(n));return}if(e.isMcp??!1){let i=await $.getRcAccessToken();if(i&&(X==="SKIP"||i===X))return;process.stderr.write(`[visa-cli] RC build requires access. Run: visa-cli setup
14
+ `),process.exit(1)}let s=await $.getRcAccessToken();if(s&&(X==="SKIP"||s===X))return;console.log(nr);let o=3;for(let i=1;i<=o;i++){let a;try{a=await tr(" Enter RC access code: ")}catch{process.exit(1)}if(bt(a)){await $.saveRcAccessToken(Ke(a)),console.log(`
15
15
  Access granted. Welcome.
16
16
  `);return}i<o&&console.log(`
17
17
  Invalid code. ${o-i} attempt(s) remaining.
18
18
  `)}console.log(`
19
19
  Invalid code. Contact your team lead.
20
- `),process.exit(1)}var vt=require("child_process");function nr(e=process.env,t=process.platform){return e.VISA_CLI_NO_BROWSER==="1"||e.VISA_CLI_NO_BROWSER==="true"?{headless:!0,reason:"VISA_CLI_NO_BROWSER is set"}:e.CI==="true"||e.CI==="1"?{headless:!0,reason:"CI environment detected"}:e.SSH_CONNECTION||e.SSH_TTY?{headless:!0,reason:"SSH session detected"}:t==="linux"&&!e.DISPLAY&&!e.WAYLAND_DISPLAY?{headless:!0,reason:"Linux with no $DISPLAY or $WAYLAND_DISPLAY"}:{headless:!1}}function rr(e){let n=e.length+4;return[`\u250C${"\u2500".repeat(n)}\u2510`,`\u2502${" ".repeat(2)}${e}${" ".repeat(2)}\u2502`,`\u2514${"\u2500".repeat(n)}\u2518`].join(`
21
- `)}function sr(e,t=process.platform){return t==="darwin"?{cmd:"open",args:[e]}:t==="win32"?{cmd:"cmd",args:["/c","start","",e]}:t==="linux"?{cmd:"xdg-open",args:[e]}:null}async function bt(e,t={}){let n=t.log??(c=>console.log(c)),r=t.env??process.env,s=t.platform??process.platform,o=t.spawn??((c,d,u)=>{(0,vt.execFile)(c,d,f=>u(f))});n(""),n(" Sign in to Visa CLI by opening this URL in your browser:"),n("");for(let c of rr(e).split(`
22
- `))n(` ${c}`);n("");let i=nr(r,s);if(i.headless){n(` (${i.reason} \u2014 skipping browser auto-open.)`),n(" Open the URL above on any device with a browser. The CLI will"),n(" continue waiting for you to complete sign-in."),n("");return}let a=sr(e,s);if(!a){n(` No known browser-open command for platform "${s}".`),n(" Open the URL above manually to continue."),n("");return}await new Promise(c=>{o(a.cmd,a.args,d=>{d?(n(` Could not open browser automatically (${d.message}).`),n(" Open the URL above manually to continue."),n("")):(n(" Opened browser. Waiting for you to sign in..."),n("")),c()})})}var _t=g(require("crypto")),P=g(require("fs")),be=g(require("path"));function $t(e,t){P.mkdirSync(be.dirname(e),{recursive:!0});let n=`${e}.${process.pid}.${_t.randomBytes(8).toString("hex")}.tmp`;try{P.writeFileSync(n,JSON.stringify(t,null,2)+`
23
- `),P.renameSync(n,e)}catch(r){try{P.unlinkSync(n)}catch{}throw r}}function wt(e){return`'${e.replace(/'/g,"'\\''")}'`}var Ct="# visa-cli-hud-v1";function or(e,t){let n=e??process.execPath,r=t??process.argv[1]??"",s=r?be.resolve(r):"";return`${s?`${wt(n)} ${wt(s)} statusline`:"visa-cli statusline"} ${Ct}`}function xt(e){return typeof e!="string"?!1:e.includes(Ct)?!0:e.includes("visa-cli")&&e.includes("statusline")}function qe(e,t=or){let n={},r=!1;if(P.existsSync(e)){r=!0;try{n=JSON.parse(P.readFileSync(e,"utf-8"))}catch(s){return{installed:"malformed-json",message:`~/.claude/settings.json is not valid JSON (${s.message}). Fix the file manually, then run: visa-cli hud enable`}}}if(n.statusLine){let s=typeof n.statusLine=="object"?n.statusLine.command:"";return xt(s)?{installed:"already-visa",message:"Visa HUD already registered in ~/.claude/settings.json."}:{installed:"other-hud-present",message:"Another HUD is already configured (keeping it). To switch to Visa HUD, edit ~/.claude/settings.json \u2192 statusLine.command"}}try{return n.statusLine={type:"command",command:t()},$t(e,n),{installed:"new",message:`Visa HUD registered in ~/.claude/settings.json${r?"":" (new file)"}. Restart Claude Code to see it pinned below the input.`}}catch(s){return{installed:"error",message:`Failed to write settings: ${s.message}. Enable manually later with: visa-cli hud enable`}}}function kt(e){if(!P.existsSync(e))return{removed:!1,message:"No ~/.claude/settings.json found."};let t;try{t=JSON.parse(P.readFileSync(e,"utf-8"))}catch(r){return{removed:!1,message:`~/.claude/settings.json is not valid JSON: ${r.message}`}}if(!t.statusLine)return{removed:!1,message:"No statusLine configured."};let n=typeof t.statusLine=="object"?t.statusLine.command:"";return xt(n)?(delete t.statusLine,$t(e,t),{removed:!0,message:"Visa HUD removed from ~/.claude/settings.json. Restart Claude Code to take effect."}):{removed:!1,message:"statusLine is owned by another tool \u2014 leaving it alone."}}var U=g(require("fs")),G=g(require("path")),ir=50,ar=64*1024,Pt=10,Ge=80;function cr(){let e=(process.env.COLORTERM??"").toLowerCase();if(e==="truecolor"||e==="24bit")return!0;let t=(process.env.TERM??"").toLowerCase();return t.includes("truecolor")||t.includes("24bit")}var We=cr(),S={reset:"\x1B[0m",visaBlue:We?"\x1B[38;2;20;52;203m":"\x1B[38;5;27m",visaBlueSoft:We?"\x1B[38;2;97;126;229m":"\x1B[38;5;111m",visaGold:We?"\x1B[38;2;247;182;0m":"\x1B[38;5;220m",green:"\x1B[38;5;48m",dim:"\x1B[2m"};function v(e,t){return e.length===0||process.env.NO_COLOR?e:`${t}${e}${S.reset}`}function Et(e){return e.replace(/\u001B\[[0-?]*[ -/]*[@-~]/g,"").replace(/[\u0000-\u001F\u007F]/g,"").length}async function At(e=process.stdin){return e.isTTY?null:new Promise(t=>{let n=[],r=!1,s=()=>{e.removeListener("data",i),e.removeListener("end",a),e.removeListener("error",c),clearTimeout(d)},o=u=>{r||(r=!0,s(),t(u))},i=u=>{n.push(typeof u=="string"?Buffer.from(u):u)},a=()=>{let u=Buffer.concat(n).toString("utf-8").trim();if(!u)return o(null);try{let f=JSON.parse(u);o(f&&typeof f=="object"?f:null)}catch{o(null)}},c=()=>o(null),d=setTimeout(()=>{n.length>0?a():o(null)},ir);e.on("data",i),e.on("end",a),e.on("error",c)})}function Lt(e){let n=Math.round(Math.max(0,Math.min(1,e))*10),r="\u2588".repeat(n),s="\u2591".repeat(10-n);return`${v(r||"",S.visaBlueSoft)}${v(s||"",S.dim)}`}function Rt(e){return!Number.isFinite(e)||e<0?"0":e>=1e6?`${(e/1e6).toFixed(1)}M`:e>=1e3?`${Math.round(e/1e3)}k`:String(Math.round(e))}function lr(e){let t=` ${v("\u2502",S.dim)} `,n=Y(e.model?.display_name)||"claude",r=e.cwd?Y(G.basename(e.cwd)):"",s=vr(e.workspace),o=r||s,i=s&&s!==o?` ${v(`@${s}`,S.visaBlueSoft)}`:"",a=[v(`[${n}]`,S.visaBlueSoft)];o&&a.push(`${v(o,S.visaGold)}${i}`);let c=a.join(t),d=Number(e.context_window?.context_window_size??0),u=typeof e.context_window?.used_percentage=="number"?e.context_window.used_percentage:typeof e.context_window?.remaining_percentage=="number"?100-e.context_window.remaining_percentage:null,f=e.context_window?.current_usage,l=[f?.input_tokens,f?.output_tokens,f?.cache_creation_input_tokens,f?.cache_read_input_tokens].filter(B=>typeof B=="number"&&Number.isFinite(B)),y=l.length>0?l.reduce((B,je)=>B+je,0):null,b=Number(e.context_window?.total_input_tokens??y??f?.input_tokens??0),x=u!==null?Math.max(0,Math.min(1,u/100)):d>0?Math.max(0,Math.min(1,b/d)):0,D=u!==null&&d>0?Math.round(x*d):b,H;if(d>0||u!==null){let B=`${String(Math.round(x*100)).padStart(2," ")}%`,je=d>0?` ${v(`(${Rt(D)}/${Rt(d)})`,S.dim)}`:"";H=`${v("Context",S.dim)} ${Lt(x)} ${v(B,S.green)}${je}`}else H=`${v("Context",S.dim)} ${v("-",S.dim)}`;let V=dr(e.rate_limits),F=[H];V&&F.push(V);let k=F.join(t);return`${c}
24
- ${k}`}function ur(e){if(typeof e!="number"||e<=0)return"";let n=(e>1e12?e:e*1e3)-Date.now();if(n<=0||n>=10080*60*1e3)return"";let r=Math.floor(n/6e4),s=Math.floor(r/60),o=r%60;return s>0?`${s}h ${o}m`:`${o}m`}function Tt(e,t){if(!e||typeof e.used_percentage!="number")return null;let n=Math.max(0,Math.min(100,e.used_percentage)),r=n/100,s=Lt(r),o=n>=90?"\x1B[38;5;196m":n>=70?S.visaGold:S.green,i=`${String(Math.round(n)).padStart(2," ")}%`,a=ur(e.resets_at),c=a?` ${v(`(${a} / ${t})`,S.dim)}`:` ${v(`(${t})`,S.dim)}`;return`${s} ${v(i,o)}${c}`}function dr(e){if(!e)return null;let t=Tt(e.five_hour,"5h"),n=typeof e.seven_day?.used_percentage=="number"?e.seven_day.used_percentage:null,r=n!==null&&n>=90?Tt(e.seven_day,"7d"):null;if(!t&&!r)return null;let s=` ${v("\u2502",S.dim)} `,o=[t,r].filter(Boolean);return`${v("Usage",S.dim)} ${o.join(s)}`}function fr(e){let t;try{let n=U.statSync(e);if(!n.isFile())return null;let r=n.size;if(r===0)return null;let s=Math.min(r,ar),o=r-s;t=U.openSync(e,"r");let i=Buffer.alloc(s);U.readSync(t,i,0,s,o);let a=i.toString("utf-8");if(o>0){let c=Buffer.alloc(1);if(U.readSync(t,c,0,1,o-1),c[0]!==10){let d=a.indexOf(`
25
- `);d>=0&&(a=a.slice(d+1))}}return a}catch{return null}finally{if(t!==void 0)try{U.closeSync(t)}catch{}}}function pr(e){if(!e||typeof e!="object")return;let t=e,n=["file_path","path","notebook_path","pattern","command","url"];for(let r of n){let s=t[r];if(typeof s=="string"&&s.length>0){if(r.endsWith("_path")||r==="path"){let o=G.basename(G.dirname(s)),i=G.basename(s);return o&&o!=="."&&o!=="/"?`${o}/${i}`:i}return s}}}function mr(e){let t=e.split(`
26
- `),n=[],r=new Set;for(let s=t.length-1;s>=0&&n.length<Pt*3;s-=1){let o=t[s].trim();if(!o)continue;let i;try{i=JSON.parse(o)}catch{continue}if(!i||typeof i!="object")continue;let c=i.message;if(!c||typeof c!="object")continue;let d=c.content;if(Array.isArray(d))for(let u of d){if(!u||typeof u!="object")continue;let f=u;if(f.type==="tool_result"&&typeof f.tool_use_id=="string")r.add(f.tool_use_id);else if(f.type==="tool_use"&&typeof f.name=="string"){let l=typeof f.id=="string"?f.id:"",y=l.length>0?!r.has(l):!1;n.push({name:f.name,target:pr(f.input),running:y})}}}return n.reverse(),n.slice(Math.max(0,n.length-Pt))}function gr(e){let t=[];for(let n of e){let r=t[t.length-1];r&&!r.running&&!n.running&&r.name===n.name&&r.target===void 0&&n.target===void 0?r.count+=1:t.push({...n,count:1})}return t}function hr(e){let t=e.running?v("\u25D0",S.visaGold):v("\u2713",S.green),n=e.running?S.visaGold:S.visaBlueSoft,r=v(Y(e.name),n),s=e.target?Y(e.target):"",o=s?`${v(":",S.dim)} ${v(s,S.dim)}`:"",i=e.count>1?` ${v(`\xD7${e.count}`,S.dim)}`:"";return o?`${t} ${r}${o}${i}`:`${t} ${r}${i}`}function yr(e){let t=` ${v("\u2502",S.dim)} `,n=Et(t),r=e.slice();for(;r.length>0;){let c=r.join(t);if(Et(c)<=Ge)return c;r=r.slice(1)}if(e.length===0)return"";let s="\u2026",i=e[e.length-1].replace(/\u001B\[[0-?]*[ -/]*[@-~]/g,""),a=i.length>Ge-n-1?i.slice(0,Ge-n-1)+s:i;return`${v(s,S.dim)}${t}${a}`}async function Sr(e){if(!e||typeof e!="string")return null;let t=fr(e);if(!t)return null;let n;try{n=mr(t)}catch{return null}if(n.length===0)return null;let s=gr(n).map(hr);return yr(s)||null}async function Nt(e,t){let n=[e];if(t){let r=lr(t);if(r&&n.push(r),t.transcript_path){let s=await Sr(t.transcript_path);s&&n.push(s)}}return n.join(`
27
- `)}function Y(e){return e?e.replace(/\u001B\][^\u0007]*(?:\u0007|\u001B\\)/g,"").replace(/\u001B\[[0-?]*[ -/]*[@-~]/g,"").replace(/[\u0000-\u0008\u000B-\u001F\u007F-\u009F]/g,"").replace(/\s+/g," ").trim():""}function vr(e){if(typeof e=="string")return Y(G.basename(e));if(!e||typeof e!="object")return"";let t=typeof e.current_dir=="string"?e.current_dir:typeof e.path=="string"?e.path:"";return Y(t?G.basename(t):e.name)}async function It(e,t){let n=t?.timeoutMs??3e4,r=new AbortController,s=setTimeout(()=>r.abort(),n);try{let{timeoutMs:o,...i}=t??{};return await fetch(e,{...i,signal:r.signal})}finally{clearTimeout(s)}}var br=/^(\d+)\.(\d+)\.(\d+)(?:-([0-9A-Za-z.-]+))?(?:\+[0-9A-Za-z.-]+)?$/;function jt(e,t){let n=Mt(e),r=Mt(t);if(!n||!r)return!1;for(let s=0;s<3;s++)if(n.main[s]!==r.main[s])return n.main[s]>r.main[s];return n.pre&&!r.pre?!1:!n.pre&&r.pre?!0:!n.pre&&!r.pre?!1:wr(n.pre,r.pre)>0}function Mt(e){if(typeof e!="string")return null;let n=e.trim().replace(/^v/,"").match(br);return n?{main:[Number(n[1]),Number(n[2]),Number(n[3])],pre:n[4]??null}:null}function wr(e,t){let n=e.split("."),r=t.split("."),s=Math.max(n.length,r.length);for(let o=0;o<s;o++){if(o>=n.length)return-1;if(o>=r.length)return 1;let i=n[o],a=r[o],c=/^\d+$/.test(i),d=/^\d+$/.test(a);if(c&&d){let u=Number(i)-Number(a);if(u!==0)return u}else{if(c)return-1;if(d)return 1;if(i<a)return-1;if(i>a)return 1}}return 0}function W(){return!!(Ot(process.env.VISA_CLI_NO_UPDATE_CHECK)||Ot(process.env.CI)||process.env.NODE_ENV==="test")}function Ot(e){if(e===void 0)return!1;let t=e.trim().toLowerCase();return!(t===""||t==="0"||t==="false"||t==="no"||t==="off")}var Je="1.5.1-rc.0",ee=class{constructor(t){this.getSessionToken=t;this.baseUrl=process.env.VISA_AUTH_URL||"https://auth.visacli.sh"}getSessionToken;baseUrl;lastSignals={};parseServerSignals(t){if(this.lastSignals={},!W()){let r=t.headers.get("X-Latest-Version"),s=t.headers.get("X-Update-Message");r&&jt(r,Je)&&(this.lastSignals.updateAvailable={version:r,message:s||`Update available: v${r}. Run: npm install -g @visa/cli && visa-cli setup`})}let n=t.headers.get("X-Feedback-Prompt");if(n)try{this.lastSignals.feedbackPrompt=JSON.parse(n)}catch{}}getClientVersion(){return Je}async request(t,n,r,s,o){let i=await this.getSessionToken();if(!i)throw new Error("Not logged in. Sign up at https://visacli.sh or run: visa-cli setup");let a={Authorization:`Bearer ${i}`};o&&(t==="GET"?a["X-User-Context"]=o.replace(/[\r\n\0]/g," ").slice(0,1e3):r={...r||{},user_context:o}),r&&(a["Content-Type"]="application/json");let c;try{c=await It(`${this.baseUrl}${n}`,{method:t,headers:{...a,"X-Visa-CLI-Version":Je},body:r?JSON.stringify(r):void 0,timeoutMs:s})}catch(u){throw u.name==="AbortError"||u.message?.includes("aborted")?new Error("The request timed out. The server may be under heavy load. Please try again."):new Error("Cannot reach the Visa CLI server. Check your internet connection and try again.")}if(this.parseServerSignals(c),c.status===401)throw new Error("Your session has expired. Run: visa-cli setup");if(c.status===429){let u=c.headers.get("Retry-After")||"3";throw new Error(`Rate limited \u2014 wait ${u}s. Tip: use the batch tool to combine multiple requests into one.`)}if(c.status===503)throw new Error("Visa CLI is temporarily unavailable. Check https://visacli.sh for status.");let d;try{d=await c.json()}catch{throw c.status===500?new Error(`Server error on ${n}. Try again or check https://visacli.sh for status.`):new Error(`Unexpected response from ${n}. Try again.`)}if(!c.ok)throw c.status===500?new Error(`Server error on ${n}. Try again or check https://visacli.sh for status.`):new Error(d?.error||`Request failed (${c.status}). Try again.`);return d}async pay(t,n){return this.request("POST","/v1/pay",t,void 0,n)}async shortcut(t,n,r,s){return this.request("POST",`/v1/shortcuts/${encodeURIComponent(t)}`,n,r,s)}async batch(t,n,r){return this.request("POST","/v1/batch",t,n,r)}async catalogSearch(t,n){let r=new URLSearchParams;t&&r.set("q",t),n&&r.set("category",n);let s=r.toString();return this.request("GET",`/v1/catalog${s?`?${s}`:""}`)}async catalogTool(t){try{return await this.request("GET",`/v1/catalog/${encodeURIComponent(t)}`)}catch{return null}}async paymentPreview(t,n){return this.request("POST","/v1/payment-preview",t,void 0,n)}async getStatus(t){return this.request("GET","/v1/status",void 0,void 0,t)}async getTransactions(t){return this.request("GET","/v1/transactions",void 0,void 0,t)}async updateSpendingControls(t,n){return this.request("POST","/v1/spending-controls",t,void 0,n)}async removeCard(t,n,r){return this.request("DELETE",`/v1/cards/${encodeURIComponent(String(t))}`,n,void 0,r)}async setDefaultCard(t,n,r){return this.request("POST",`/v1/cards/${encodeURIComponent(String(t))}/default`,n,void 0,r)}async getAttestationChallenge(){return this.request("GET","/v1/attestation-challenge")}async registerAttestationKey(t){return this.request("POST","/v1/attestation-key",{publicKey:t})}async logout(t,n){return this.request("POST","/v1/logout",t,void 0,n)}async feedback(t,n,r){return this.request("POST","/v1/feedback",{message:t,...n&&{transaction_id:n}},void 0,r)}async feedSubmit(t){return this.request("POST","/v1/feed",t)}async feedList(t){let n=new URLSearchParams;t?.tab&&n.set("tab",t.tab),t?.limit&&n.set("limit",String(t.limit)),t?.offset&&n.set("offset",String(t.offset));let r=n.toString();return this.request("GET",`/v1/feed${r?"?"+r:""}`)}async feedVote(t,n){return this.request("POST",`/v1/feed/${encodeURIComponent(t)}/vote`,{direction:n})}async feedApprove(t){return this.request("POST",`/v1/feed/${encodeURIComponent(t)}/approve`)}async feedDelete(t){return this.request("DELETE",`/v1/feed/${encodeURIComponent(t)}`)}async feedPending(){return this.request("GET","/v1/feed/pending")}async submitFeedback(t,n,r){return this.request("POST","/v1/feedback",{message:t,...n&&{transaction_id:n}},void 0,r)}async getFeedback(t,n){let r=new URLSearchParams;t&&r.set("limit",String(t));let s=r.toString();return this.request("GET",`/v1/feedback${s?"?"+s:""}`,void 0,void 0,n)}async submitRatedFeedback(t){return this.request("POST","/v1/feedback",t)}};var Qe=require("child_process"),Kt=require("util"),qt=g(require("crypto")),C=g(require("fs")),Gt=g(require("os")),O=g(require("path"));var E=g(require("fs")),Xe=g(require("path")),Dt=g(require("os")),Ye=Xe.join(Dt.homedir(),".visa-mcp"),re=Xe.join(Ye,"mcp-server.log"),_r=5*1024*1024,ze=null;function $r(){E.existsSync(Ye)||E.mkdirSync(Ye,{recursive:!0,mode:448})}function Cr(){if(!ze){if($r(),E.existsSync(re)&&E.statSync(re).size>_r){let t=re+".1";E.existsSync(t)&&E.unlinkSync(t),E.renameSync(re,t)}ze=E.createWriteStream(re,{flags:"a"})}return ze}function we(e,...t){let n=new Date().toISOString(),r=t.map(o=>typeof o=="string"?o:JSON.stringify(o,null,2)).join(" "),s=`[${n}] [${e}] ${r}
28
- `;process.stderr.write(s),Cr().write(s)}var Ht={debug:(...e)=>we("DEBUG",...e),info:(...e)=>we("INFO",...e),warn:(...e)=>we("WARN",...e),error:(...e)=>we("ERROR",...e)};var te=(0,Kt.promisify)(Qe.execFile),Ce=O.join(Gt.homedir(),".visa-mcp","bin"),X=O.join(Ce,"Visa CLI"),xr=O.join(__dirname,"..","native"),Ut="5",Vt=O.join(Ce,"visa-keychain.version"),Ft=O.join(Ce,"visa-keychain.sha256");function Bt(e){let t=C.readFileSync(e);return qt.createHash("sha256").update(t).digest("hex")}async function Wt(){try{if(C.readFileSync(Vt,"utf-8").trim()===Ut&&C.existsSync(X)){let r=C.readFileSync(Ft,"utf-8").trim();if(Bt(X)!==r)Ht.warn("binary:hash-mismatch",{message:"Binary hash mismatch \u2014 possible tampering detected. Recompiling from source."}),C.unlinkSync(X);else return X}}catch{}let e=O.join(xr,"visa-keychain.m");if(C.existsSync(e)||(e=O.resolve(__dirname,"..","..","native","visa-keychain.m")),C.existsSync(e)||(e=O.resolve(__dirname,"..","native","visa-keychain.m")),!C.existsSync(e))throw new Error("visa-keychain.m source not found. Reinstall Visa CLI.");C.mkdirSync(Ce,{recursive:!0,mode:448});try{await te("clang",["-framework","Security","-framework","LocalAuthentication","-framework","Foundation","-framework","AppKit","-o",X,e],{timeout:3e4})}catch(n){throw n.code==="ENOENT"?new Error("Xcode Command Line Tools required. Install: xcode-select --install"):n}let t=Bt(X);return C.writeFileSync(Ft,t,{mode:384}),C.writeFileSync(Vt,Ut,{mode:384}),X}async function Jt(e){let t=await Wt(),n;try{n=(await te(t,e,{timeout:6e4})).stdout}catch(o){n=o.stdout||"";let i=n.trim();throw i.startsWith("ERROR:")?new Error(i.slice(6)):new Error(o.stderr?.trim()||o.message||"Unknown error")}let r=n.trim();if(r.startsWith("OK:"))return r.slice(3);if(r==="OK")return;let s=r.startsWith("ERROR:")?r.slice(6):"Unknown error";throw new Error(s)}var Ze=null;function se(){return process.env.VISA_MOCK_TOUCHID==="true"?!0:process.platform!=="darwin"?!1:Ze!==null?Ze:(Ze=!0,!0)}var _e="visa-cli",$e="attestation-key";async function kr(e){try{await te("security",["delete-generic-password","-s",_e,"-a",$e],{timeout:5e3})}catch{}await te("security",["add-generic-password","-s",_e,"-a",$e,"-w",e],{timeout:5e3})}async function Pr(){try{let{stdout:e}=await te("security",["find-generic-password","-s",_e,"-a",$e,"-w"],{timeout:5e3});return e.trim()||null}catch{return null}}async function zt(){let e=await Jt(["generate-key"]);if(!e)throw new Error("Key generation returned no output");let t=e.indexOf(":");if(t<0)throw new Error("Unexpected generate-key output format");let n=e.slice(0,t),r=e.slice(t+1);return await kr(n),r}async function Yt(e,t){if(process.env.VISA_MOCK_TOUCHID==="true")return Promise.resolve("mock-ecdsa-signature-for-testing");let n=await Pr();if(!n)throw new Error("Attestation key not found. Run setup to generate a new key.");let r=await Wt(),s=["sign",e];return t&&s.push(t),new Promise((o,i)=>{let a=(0,Qe.execFile)(r,s,{timeout:6e4},(c,d)=>{let u=(d||"").trim();if(c){u.startsWith("ERROR:")?i(new Error(u.slice(6))):i(new Error(c.stderr?.trim()||c.message||"Unknown error"));return}u.startsWith("OK:")?o(u.slice(3)):i(new Error(u.startsWith("ERROR:")?u.slice(6):"Unknown error"))});a.stdin.write(n),a.stdin.end()})}async function Xt(){try{await te("security",["delete-generic-password","-s",_e,"-a",$e],{timeout:5e3})}catch{}try{await Jt(["delete-key"])}catch{}}function Zt(e,t=process.stderr){if(W()||!e?.updateAvailable)return!1;let{message:n}=e.updateAvailable;return n?(t.write(`
20
+ `),process.exit(1)}var wt=require("child_process");function rr(e=process.env,t=process.platform){return e.VISA_CLI_NO_BROWSER==="1"||e.VISA_CLI_NO_BROWSER==="true"?{headless:!0,reason:"VISA_CLI_NO_BROWSER is set"}:e.CI==="true"||e.CI==="1"?{headless:!0,reason:"CI environment detected"}:e.SSH_CONNECTION||e.SSH_TTY?{headless:!0,reason:"SSH session detected"}:t==="linux"&&!e.DISPLAY&&!e.WAYLAND_DISPLAY?{headless:!0,reason:"Linux with no $DISPLAY or $WAYLAND_DISPLAY"}:{headless:!1}}function sr(e){let n=e.length+4;return[`\u250C${"\u2500".repeat(n)}\u2510`,`\u2502${" ".repeat(2)}${e}${" ".repeat(2)}\u2502`,`\u2514${"\u2500".repeat(n)}\u2518`].join(`
21
+ `)}function or(e,t=process.platform){return t==="darwin"?{cmd:"open",args:[e]}:t==="win32"?{cmd:"cmd",args:["/c","start","",e]}:t==="linux"?{cmd:"xdg-open",args:[e]}:null}async function _t(e,t={}){let n=t.log??(c=>console.log(c)),r=t.env??process.env,s=t.platform??process.platform,o=t.spawn??((c,d,l)=>{(0,wt.execFile)(c,d,f=>l(f))});n(""),n(" Sign in to Visa CLI by opening this URL in your browser:"),n("");for(let c of sr(e).split(`
22
+ `))n(` ${c}`);n("");let i=rr(r,s);if(i.headless){n(` (${i.reason} \u2014 skipping browser auto-open.)`),n(" Open the URL above on any device with a browser. The CLI will"),n(" continue waiting for you to complete sign-in."),n("");return}let a=or(e,s);if(!a){n(` No known browser-open command for platform "${s}".`),n(" Open the URL above manually to continue."),n("");return}await new Promise(c=>{o(a.cmd,a.args,d=>{d?(n(` Could not open browser automatically (${d.message}).`),n(" Open the URL above manually to continue."),n("")):(n(" Opened browser. Waiting for you to sign in..."),n("")),c()})})}var Ct=g(require("crypto")),E=g(require("fs")),ve=g(require("path"));function xt(e,t){E.mkdirSync(ve.dirname(e),{recursive:!0});let n=`${e}.${process.pid}.${Ct.randomBytes(8).toString("hex")}.tmp`;try{E.writeFileSync(n,JSON.stringify(t,null,2)+`
23
+ `),E.renameSync(n,e)}catch(r){try{E.unlinkSync(n)}catch{}throw r}}function $t(e){return`'${e.replace(/'/g,"'\\''")}'`}var kt="# visa-cli-hud-v1";function ir(e,t){let n=e??process.execPath,r=t??process.argv[1]??"",s=r?ve.resolve(r):"";return`${s?`${$t(n)} ${$t(s)} statusline`:"visa-cli statusline"} ${kt}`}function Pt(e){return typeof e!="string"?!1:e.includes(kt)?!0:e.includes("visa-cli")&&e.includes("statusline")}function qe(e,t=ir){let n={},r=!1;if(E.existsSync(e)){r=!0;try{n=JSON.parse(E.readFileSync(e,"utf-8"))}catch(s){return{installed:"malformed-json",message:`~/.claude/settings.json is not valid JSON (${s.message}). Fix the file manually, then run: visa-cli hud enable`}}}if(n.statusLine){let s=typeof n.statusLine=="object"?n.statusLine.command:"";return Pt(s)?{installed:"already-visa",message:"Visa HUD already registered in ~/.claude/settings.json."}:{installed:"other-hud-present",message:"Another HUD is already configured (keeping it). To switch to Visa HUD, edit ~/.claude/settings.json \u2192 statusLine.command"}}try{return n.statusLine={type:"command",command:t()},xt(e,n),{installed:"new",message:`Visa HUD registered in ~/.claude/settings.json${r?"":" (new file)"}. Restart Claude Code to see it pinned below the input.`}}catch(s){return{installed:"error",message:`Failed to write settings: ${s.message}. Enable manually later with: visa-cli hud enable`}}}function Et(e){if(!E.existsSync(e))return{removed:!1,message:"No ~/.claude/settings.json found."};let t;try{t=JSON.parse(E.readFileSync(e,"utf-8"))}catch(r){return{removed:!1,message:`~/.claude/settings.json is not valid JSON: ${r.message}`}}if(!t.statusLine)return{removed:!1,message:"No statusLine configured."};let n=typeof t.statusLine=="object"?t.statusLine.command:"";return Pt(n)?(delete t.statusLine,xt(e,t),{removed:!0,message:"Visa HUD removed from ~/.claude/settings.json. Restart Claude Code to take effect."}):{removed:!1,message:"statusLine is owned by another tool \u2014 leaving it alone."}}var V=g(require("fs")),J=g(require("path")),ar=50,cr=64*1024,Tt=10,Ge=80;function lr(){let e=(process.env.COLORTERM??"").toLowerCase();if(e==="truecolor"||e==="24bit")return!0;let t=(process.env.TERM??"").toLowerCase();return t.includes("truecolor")||t.includes("24bit")}var We=lr(),S={reset:"\x1B[0m",visaBlue:We?"\x1B[38;2;20;52;203m":"\x1B[38;5;27m",visaBlueSoft:We?"\x1B[38;2;97;126;229m":"\x1B[38;5;111m",visaGold:We?"\x1B[38;2;247;182;0m":"\x1B[38;5;220m",green:"\x1B[38;5;48m",dim:"\x1B[2m"};function b(e,t){return e.length===0||process.env.NO_COLOR?e:`${t}${e}${S.reset}`}function Rt(e){return e.replace(/\u001B\[[0-?]*[ -/]*[@-~]/g,"").replace(/[\u0000-\u001F\u007F]/g,"").length}async function It(e=process.stdin){return e.isTTY?null:new Promise(t=>{let n=[],r=!1,s=()=>{e.removeListener("data",i),e.removeListener("end",a),e.removeListener("error",c),clearTimeout(d)},o=l=>{r||(r=!0,s(),t(l))},i=l=>{n.push(typeof l=="string"?Buffer.from(l):l)},a=()=>{let l=Buffer.concat(n).toString("utf-8").trim();if(!l)return o(null);try{let f=JSON.parse(l);o(f&&typeof f=="object"?f:null)}catch{o(null)}},c=()=>o(null),d=setTimeout(()=>{n.length>0?a():o(null)},ar);e.on("data",i),e.on("end",a),e.on("error",c)})}function Nt(e){let n=Math.round(Math.max(0,Math.min(1,e))*10),r="\u2588".repeat(n),s="\u2591".repeat(10-n);return`${b(r||"",S.visaBlueSoft)}${b(s||"",S.dim)}`}function At(e){return!Number.isFinite(e)||e<0?"0":e>=1e6?`${(e/1e6).toFixed(1)}M`:e>=1e3?`${Math.round(e/1e3)}k`:String(Math.round(e))}function ur(e){let t=` ${b("\u2502",S.dim)} `,n=Z(e.model?.display_name)||"claude",r=e.cwd?Z(J.basename(e.cwd)):"",s=vr(e.workspace),o=r||s,i=s&&s!==o?` ${b(`@${s}`,S.visaBlueSoft)}`:"",a=[b(`[${n}]`,S.visaBlueSoft)];o&&a.push(`${b(o,S.visaGold)}${i}`);let c=a.join(t),d=Number(e.context_window?.context_window_size??0),l=typeof e.context_window?.used_percentage=="number"?e.context_window.used_percentage:typeof e.context_window?.remaining_percentage=="number"?100-e.context_window.remaining_percentage:null,f=e.context_window?.current_usage,u=[f?.input_tokens,f?.output_tokens,f?.cache_creation_input_tokens,f?.cache_read_input_tokens].filter(q=>typeof q=="number"&&Number.isFinite(q)),y=u.length>0?u.reduce((q,Me)=>q+Me,0):null,v=Number(e.context_window?.total_input_tokens??y??f?.input_tokens??0),k=l!==null?Math.max(0,Math.min(1,l/100)):d>0?Math.max(0,Math.min(1,v/d)):0,U=l!==null&&d>0?Math.round(k*d):v,H;if(d>0||l!==null){let q=`${String(Math.round(k*100)).padStart(2," ")}%`,Me=d>0?` ${b(`(${At(U)}/${At(d)})`,S.dim)}`:"";H=`${b("Context",S.dim)} ${Nt(k)} ${b(q,S.green)}${Me}`}else H=`${b("Context",S.dim)} ${b("-",S.dim)}`;let B=fr(e.rate_limits),K=[H];B&&K.push(B);let P=K.join(t);return`${c}
24
+ ${P}`}function dr(e){if(typeof e!="number"||e<=0)return"";let n=(e>1e12?e:e*1e3)-Date.now();if(n<=0||n>=10080*60*1e3)return"";let r=Math.floor(n/6e4),s=Math.floor(r/60),o=r%60;return s>0?`${s}h ${o}m`:`${o}m`}function Lt(e,t){if(!e||typeof e.used_percentage!="number")return null;let n=Math.max(0,Math.min(100,e.used_percentage)),r=n/100,s=Nt(r),o=n>=90?"\x1B[38;5;196m":n>=70?S.visaGold:S.green,i=`${String(Math.round(n)).padStart(2," ")}%`,a=dr(e.resets_at),c=a?` ${b(`(${a} / ${t})`,S.dim)}`:` ${b(`(${t})`,S.dim)}`;return`${s} ${b(i,o)}${c}`}function fr(e){if(!e)return null;let t=Lt(e.five_hour,"5h"),n=typeof e.seven_day?.used_percentage=="number"?e.seven_day.used_percentage:null,r=n!==null&&n>=90?Lt(e.seven_day,"7d"):null;if(!t&&!r)return null;let s=` ${b("\u2502",S.dim)} `,o=[t,r].filter(Boolean);return`${b("Usage",S.dim)} ${o.join(s)}`}function pr(e){let t;try{let n=V.statSync(e);if(!n.isFile())return null;let r=n.size;if(r===0)return null;let s=Math.min(r,cr),o=r-s;t=V.openSync(e,"r");let i=Buffer.alloc(s);V.readSync(t,i,0,s,o);let a=i.toString("utf-8");if(o>0){let c=Buffer.alloc(1);if(V.readSync(t,c,0,1,o-1),c[0]!==10){let d=a.indexOf(`
25
+ `);d>=0&&(a=a.slice(d+1))}}return a}catch{return null}finally{if(t!==void 0)try{V.closeSync(t)}catch{}}}function mr(e){if(!e||typeof e!="object")return;let t=e,n=["file_path","path","notebook_path","pattern","command","url"];for(let r of n){let s=t[r];if(typeof s=="string"&&s.length>0){if(r.endsWith("_path")||r==="path"){let o=J.basename(J.dirname(s)),i=J.basename(s);return o&&o!=="."&&o!=="/"?`${o}/${i}`:i}return s}}}function gr(e){let t=e.split(`
26
+ `),n=[],r=new Set;for(let s=t.length-1;s>=0&&n.length<Tt*3;s-=1){let o=t[s].trim();if(!o)continue;let i;try{i=JSON.parse(o)}catch{continue}if(!i||typeof i!="object")continue;let c=i.message;if(!c||typeof c!="object")continue;let d=c.content;if(Array.isArray(d))for(let l of d){if(!l||typeof l!="object")continue;let f=l;if(f.type==="tool_result"&&typeof f.tool_use_id=="string")r.add(f.tool_use_id);else if(f.type==="tool_use"&&typeof f.name=="string"){let u=typeof f.id=="string"?f.id:"",y=u.length>0?!r.has(u):!1;n.push({name:f.name,target:mr(f.input),running:y})}}}return n.reverse(),n.slice(Math.max(0,n.length-Tt))}function hr(e){let t=[];for(let n of e){let r=t[t.length-1];r&&!r.running&&!n.running&&r.name===n.name&&r.target===void 0&&n.target===void 0?r.count+=1:t.push({...n,count:1})}return t}function yr(e){let t=e.running?b("\u25D0",S.visaGold):b("\u2713",S.green),n=e.running?S.visaGold:S.visaBlueSoft,r=b(Z(e.name),n),s=e.target?Z(e.target):"",o=s?`${b(":",S.dim)} ${b(s,S.dim)}`:"",i=e.count>1?` ${b(`\xD7${e.count}`,S.dim)}`:"";return o?`${t} ${r}${o}${i}`:`${t} ${r}${i}`}function Sr(e){let t=` ${b("\u2502",S.dim)} `,n=Rt(t),r=e.slice();for(;r.length>0;){let c=r.join(t);if(Rt(c)<=Ge)return c;r=r.slice(1)}if(e.length===0)return"";let s="\u2026",i=e[e.length-1].replace(/\u001B\[[0-?]*[ -/]*[@-~]/g,""),a=i.length>Ge-n-1?i.slice(0,Ge-n-1)+s:i;return`${b(s,S.dim)}${t}${a}`}async function br(e){if(!e||typeof e!="string")return null;let t=pr(e);if(!t)return null;let n;try{n=gr(t)}catch{return null}if(n.length===0)return null;let s=hr(n).map(yr);return Sr(s)||null}async function Dt(e,t){let n=[e];if(t){let r=ur(t);if(r&&n.push(r),t.transcript_path){let s=await br(t.transcript_path);s&&n.push(s)}}return n.join(`
27
+ `)}function Z(e){return e?e.replace(/\u001B\][^\u0007]*(?:\u0007|\u001B\\)/g,"").replace(/\u001B\[[0-?]*[ -/]*[@-~]/g,"").replace(/[\u0000-\u0008\u000B-\u001F\u007F-\u009F]/g,"").replace(/\s+/g," ").trim():""}function vr(e){if(typeof e=="string")return Z(J.basename(e));if(!e||typeof e!="object")return"";let t=typeof e.current_dir=="string"?e.current_dir:typeof e.path=="string"?e.path:"";return Z(t?J.basename(t):e.name)}async function Mt(e,t){let n=t?.timeoutMs??3e4,r=new AbortController,s=setTimeout(()=>r.abort(),n);try{let{timeoutMs:o,...i}=t??{};return await fetch(e,{...i,signal:r.signal})}finally{clearTimeout(s)}}var wr=/^(\d+)\.(\d+)\.(\d+)(?:-([0-9A-Za-z.-]+))?(?:\+[0-9A-Za-z.-]+)?$/;function jt(e,t){let n=Ot(e),r=Ot(t);if(!n||!r)return!1;for(let s=0;s<3;s++)if(n.main[s]!==r.main[s])return n.main[s]>r.main[s];return n.pre&&!r.pre?!1:!n.pre&&r.pre?!0:!n.pre&&!r.pre?!1:_r(n.pre,r.pre)>0}function Ot(e){if(typeof e!="string")return null;let n=e.trim().replace(/^v/,"").match(wr);return n?{main:[Number(n[1]),Number(n[2]),Number(n[3])],pre:n[4]??null}:null}function _r(e,t){let n=e.split("."),r=t.split("."),s=Math.max(n.length,r.length);for(let o=0;o<s;o++){if(o>=n.length)return-1;if(o>=r.length)return 1;let i=n[o],a=r[o],c=/^\d+$/.test(i),d=/^\d+$/.test(a);if(c&&d){let l=Number(i)-Number(a);if(l!==0)return l}else{if(c)return-1;if(d)return 1;if(i<a)return-1;if(i>a)return 1}}return 0}function z(){return!!(Ut(process.env.VISA_CLI_NO_UPDATE_CHECK)||Ut(process.env.CI)||process.env.NODE_ENV==="test")}function Ut(e){if(e===void 0)return!1;let t=e.trim().toLowerCase();return!(t===""||t==="0"||t==="false"||t==="no"||t==="off")}var Je="1.6.0-rc.1",te=class{constructor(t){this.getSessionToken=t;this.baseUrl=process.env.VISA_AUTH_URL||"https://auth.visacli.sh"}getSessionToken;baseUrl;lastSignals={};parseServerSignals(t){if(this.lastSignals={},!z()){let r=t.headers.get("X-Latest-Version"),s=t.headers.get("X-Update-Message");r&&jt(r,Je)&&(this.lastSignals.updateAvailable={version:r,message:s||`Update available: v${r}. Run: npm install -g @visa/cli && visa-cli setup`})}let n=t.headers.get("X-Feedback-Prompt");if(n)try{this.lastSignals.feedbackPrompt=JSON.parse(n)}catch{}}getClientVersion(){return Je}async request(t,n,r,s,o){let i=await this.getSessionToken();if(!i)throw new Error("Not logged in. Sign up at https://visacli.sh or run: visa-cli setup");let a={Authorization:`Bearer ${i}`};o&&(t==="GET"?a["X-User-Context"]=o.replace(/[\r\n\0]/g," ").slice(0,1e3):r={...r||{},user_context:o}),r&&(a["Content-Type"]="application/json");let c;try{c=await Mt(`${this.baseUrl}${n}`,{method:t,headers:{...a,"X-Visa-CLI-Version":Je},body:r?JSON.stringify(r):void 0,timeoutMs:s})}catch(l){throw l.name==="AbortError"||l.message?.includes("aborted")?new Error("The request timed out. The server may be under heavy load. Please try again."):new Error("Cannot reach the Visa CLI server. Check your internet connection and try again.")}if(this.parseServerSignals(c),c.status===401)throw new Error("Your session has expired. Run: visa-cli setup");if(c.status===429){let l=c.headers.get("Retry-After")||"3";throw new Error(`Rate limited \u2014 wait ${l}s. Tip: use the batch tool to combine multiple requests into one.`)}if(c.status===503)throw new Error("Visa CLI is temporarily unavailable. Check https://visacli.sh for status.");let d;try{d=await c.json()}catch{throw c.status===500?new Error(`Server error on ${n}. Try again or check https://visacli.sh for status.`):new Error(`Unexpected response from ${n}. Try again.`)}if(!c.ok)throw c.status===500?new Error(`Server error on ${n}. Try again or check https://visacli.sh for status.`):new Error(d?.error||`Request failed (${c.status}). Try again.`);return d}async pay(t,n){return this.request("POST","/v1/pay",t,void 0,n)}async shortcut(t,n,r,s){return this.request("POST",`/v1/shortcuts/${encodeURIComponent(t)}`,n,r,s)}async batch(t,n,r){return this.request("POST","/v1/batch",t,n,r)}async catalogSearch(t,n){let r=new URLSearchParams;t&&r.set("q",t),n&&r.set("category",n);let s=r.toString();return this.request("GET",`/v1/catalog${s?`?${s}`:""}`)}async catalogTool(t){try{return await this.request("GET",`/v1/catalog/${encodeURIComponent(t)}`)}catch{return null}}async paymentPreview(t,n){return this.request("POST","/v1/payment-preview",t,void 0,n)}async getStatus(t){return this.request("GET","/v1/status",void 0,void 0,t)}async getTransactions(t){return this.request("GET","/v1/transactions",void 0,void 0,t)}async updateSpendingControls(t,n){return this.request("POST","/v1/spending-controls",t,void 0,n)}async removeCard(t,n,r){return this.request("DELETE",`/v1/cards/${encodeURIComponent(String(t))}`,n,void 0,r)}async setDefaultCard(t,n,r){return this.request("POST",`/v1/cards/${encodeURIComponent(String(t))}/default`,n,void 0,r)}async getAttestationChallenge(){return this.request("GET","/v1/attestation-challenge")}async registerAttestationKey(t){return this.request("POST","/v1/attestation-key",{publicKey:t})}async setBiometricPreference(t,n){return this.request("POST","/v1/biometric-preference",{...t,confirm:!0},void 0,n)}async logout(t,n){return this.request("POST","/v1/logout",t,void 0,n)}async feedback(t,n,r){return this.request("POST","/v1/feedback",{message:t,...n&&{transaction_id:n}},void 0,r)}async feedSubmit(t){return this.request("POST","/v1/feed",t)}async feedList(t){let n=new URLSearchParams;t?.tab&&n.set("tab",t.tab),t?.limit&&n.set("limit",String(t.limit)),t?.offset&&n.set("offset",String(t.offset));let r=n.toString();return this.request("GET",`/v1/feed${r?"?"+r:""}`)}async feedVote(t,n){return this.request("POST",`/v1/feed/${encodeURIComponent(t)}/vote`,{direction:n})}async feedApprove(t){return this.request("POST",`/v1/feed/${encodeURIComponent(t)}/approve`)}async feedDelete(t){return this.request("DELETE",`/v1/feed/${encodeURIComponent(t)}`)}async feedPending(){return this.request("GET","/v1/feed/pending")}async submitFeedback(t,n,r){return this.request("POST","/v1/feedback",{message:t,...n&&{transaction_id:n}},void 0,r)}async getFeedback(t,n){let r=new URLSearchParams;t&&r.set("limit",String(t));let s=r.toString();return this.request("GET",`/v1/feedback${s?"?"+s:""}`,void 0,void 0,n)}async submitRatedFeedback(t){return this.request("POST","/v1/feedback",t)}};var Qe=require("child_process"),Gt=require("util"),Wt=g(require("crypto")),C=g(require("fs")),Jt=g(require("os")),O=g(require("path"));var T=g(require("fs")),Xe=g(require("path")),Ht=g(require("os")),Ye=Xe.join(Ht.homedir(),".visa-mcp"),se=Xe.join(Ye,"mcp-server.log"),$r=5*1024*1024,ze=null;function Cr(){T.existsSync(Ye)||T.mkdirSync(Ye,{recursive:!0,mode:448})}function xr(){if(!ze){if(Cr(),T.existsSync(se)&&T.statSync(se).size>$r){let t=se+".1";T.existsSync(t)&&T.unlinkSync(t),T.renameSync(se,t)}ze=T.createWriteStream(se,{flags:"a"})}return ze}function we(e,...t){let n=new Date().toISOString(),r=t.map(o=>typeof o=="string"?o:JSON.stringify(o,null,2)).join(" "),s=`[${n}] [${e}] ${r}
28
+ `;process.stderr.write(s),xr().write(s)}var Vt={debug:(...e)=>we("DEBUG",...e),info:(...e)=>we("INFO",...e),warn:(...e)=>we("WARN",...e),error:(...e)=>we("ERROR",...e)};var ne=(0,Gt.promisify)(Qe.execFile),Ce=O.join(Jt.homedir(),".visa-mcp","bin"),Q=O.join(Ce,"Visa CLI"),kr=O.join(__dirname,"..","native"),Ft="5",Bt=O.join(Ce,"visa-keychain.version"),Kt=O.join(Ce,"visa-keychain.sha256");function qt(e){let t=C.readFileSync(e);return Wt.createHash("sha256").update(t).digest("hex")}async function zt(){try{if(C.readFileSync(Bt,"utf-8").trim()===Ft&&C.existsSync(Q)){let r=C.readFileSync(Kt,"utf-8").trim();if(qt(Q)!==r)Vt.warn("binary:hash-mismatch",{message:"Binary hash mismatch \u2014 possible tampering detected. Recompiling from source."}),C.unlinkSync(Q);else return Q}}catch{}let e=O.join(kr,"visa-keychain.m");if(C.existsSync(e)||(e=O.resolve(__dirname,"..","..","native","visa-keychain.m")),C.existsSync(e)||(e=O.resolve(__dirname,"..","native","visa-keychain.m")),!C.existsSync(e))throw new Error("visa-keychain.m source not found. Reinstall Visa CLI.");C.mkdirSync(Ce,{recursive:!0,mode:448});try{await ne("clang",["-framework","Security","-framework","LocalAuthentication","-framework","Foundation","-framework","AppKit","-o",Q,e],{timeout:3e4})}catch(n){throw n.code==="ENOENT"?new Error("Xcode Command Line Tools required. Install: xcode-select --install"):n}let t=qt(Q);return C.writeFileSync(Kt,t,{mode:384}),C.writeFileSync(Bt,Ft,{mode:384}),Q}async function Yt(e){let t=await zt(),n;try{n=(await ne(t,e,{timeout:6e4})).stdout}catch(o){n=o.stdout||"";let i=n.trim();throw i.startsWith("ERROR:")?new Error(i.slice(6)):new Error(o.stderr?.trim()||o.message||"Unknown error")}let r=n.trim();if(r.startsWith("OK:"))return r.slice(3);if(r==="OK")return;let s=r.startsWith("ERROR:")?r.slice(6):"Unknown error";throw new Error(s)}var Ze=null;function F(){return process.env.VISA_MOCK_TOUCHID==="true"?!0:process.platform!=="darwin"?!1:Ze!==null?Ze:(Ze=!0,!0)}var _e="visa-cli",$e="attestation-key";async function Pr(e){try{await ne("security",["delete-generic-password","-s",_e,"-a",$e],{timeout:5e3})}catch{}await ne("security",["add-generic-password","-s",_e,"-a",$e,"-w",e],{timeout:5e3})}async function Er(){try{let{stdout:e}=await ne("security",["find-generic-password","-s",_e,"-a",$e,"-w"],{timeout:5e3});return e.trim()||null}catch{return null}}async function Xt(){let e=await Yt(["generate-key"]);if(!e)throw new Error("Key generation returned no output");let t=e.indexOf(":");if(t<0)throw new Error("Unexpected generate-key output format");let n=e.slice(0,t),r=e.slice(t+1);return await Pr(n),r}async function et(e,t){if(process.env.VISA_MOCK_TOUCHID==="true")return Promise.resolve("mock-ecdsa-signature-for-testing");let n=await Er();if(!n)throw new Error("Attestation key not found. Run setup to generate a new key.");let r=await zt(),s=["sign",e];return t&&s.push(t),new Promise((o,i)=>{let a=(0,Qe.execFile)(r,s,{timeout:6e4},(c,d)=>{let l=(d||"").trim();if(c){l.startsWith("ERROR:")?i(new Error(l.slice(6))):i(new Error(c.stderr?.trim()||c.message||"Unknown error"));return}l.startsWith("OK:")?o(l.slice(3)):i(new Error(l.startsWith("ERROR:")?l.slice(6):"Unknown error"))});a.stdin.write(n),a.stdin.end()})}async function Zt(){try{await ne("security",["delete-generic-password","-s",_e,"-a",$e],{timeout:5e3})}catch{}try{await Yt(["delete-key"])}catch{}}function Qt(e,t=process.stderr){if(z()||!e?.updateAvailable)return!1;let{message:n}=e.updateAvailable;return n?(t.write(`
29
29
  \x1B[33m\u2191 ${n}\x1B[0m
30
- `),!0):!1}function en(e,t,n,r){let o=Mr(e.spendingControls).dailyLimit,i=Math.max(0,oe(e.dailySpent)),a=o>0?Math.min(o,Math.max(0,oe(e.dailyRemaining??o-i))):0,c=o>0?Math.min(1,i/o):0,u=(Array.isArray(t)?t:[]).filter(Ar),f=u.slice(0,3),l=Lr(u,3),y=(e.cards??[]).slice(0,3),b=r.latestVersion?et(r.latestVersion):"",x=r.updateCheckDisabled?"update checks disabled":b?`update available: v${b}`:"up to date",D=Math.round(c*100),H=J(e.status,e.enrolled?"approved":"not enrolled"),F=["VISA CLI",`Status: ${e.enrolled?"Visa ready":"Visa setup needed"} | account: ${H} | touch id: ${n?"ready":"unavailable"}`,`Version: v${r.currentVersion} | ${x}`,`Spend meter: ${Qt(c)} ${String(D).padStart(3," ")}% | remaining ${ne(a)}/day | daily cap ${ne(o)}`,"","Spend",` Remaining ${ne(a)} / ${ne(o)}`,` Usage ${Qt(c)} ${D}%`,` Spent today ${ne(i)}`,` Attestation key ${e.hasAttestationKey?"registered":"missing"}`,"","Cards",...y.length>0?y.map(k=>` ${Ir(k)}`):[" No cards enrolled"],"","Last 3 services",...l.length>0?l.map((k,B)=>` ${B+1}. ${k}`):[" No paid services yet"],"","Recent receipts",...f.length>0?f.map(k=>` ${Nr(k)}`):[" No receipts yet"]];return r.updateMessage&&F.push("",`Update: ${et(r.updateMessage)}`),`${F.join(`
30
+ `),!0):!1}function tn(e,t,n,r){let o=Mr(e.spendingControls).dailyLimit,i=Math.max(0,oe(e.dailySpent)),a=o>0?Math.min(o,Math.max(0,oe(e.dailyRemaining??o-i))):0,c=o>0?Math.min(1,i/o):0,l=(Array.isArray(t)?t:[]).filter(Lr),f=l.slice(0,3),u=Ir(l,3),y=(e.cards??[]).slice(0,3),v=r.latestVersion?tt(r.latestVersion):"",k=r.updateCheckDisabled?"update checks disabled":v?`update available: v${v}`:"up to date",U=Math.round(c*100),H=Y(e.status,e.enrolled?"approved":"not enrolled"),K=["VISA CLI",`Status: ${e.enrolled?"Visa ready":"Visa setup needed"} | account: ${H} | touch id: ${n?"ready":"unavailable"}`,`Version: v${r.currentVersion} | ${k}`,`Spend meter: ${en(c)} ${String(U).padStart(3," ")}% | remaining ${re(a)}/day | daily cap ${re(o)}`,"","Spend",` Remaining ${re(a)} / ${re(o)}`,` Usage ${en(c)} ${U}%`,` Spent today ${re(i)}`,` Attestation key ${e.hasAttestationKey?"registered":"missing"}`,"","Cards",...y.length>0?y.map(P=>` ${Dr(P)}`):[" No cards enrolled"],"","Last 3 services",...u.length>0?u.map((P,q)=>` ${q+1}. ${P}`):[" No paid services yet"],"","Recent receipts",...f.length>0?f.map(P=>` ${Nr(P)}`):[" No receipts yet"]];return r.updateMessage&&K.push("",`Update: ${tt(r.updateMessage)}`),`${K.join(`
31
31
  `)}
32
- `}function Rr(e){return e.tool_name!=null}function Tr(e){return oe(e.amount)===0&&e.status==="failed"}function Ar(e){return Rr(e)&&!Tr(e)}function Lr(e,t=1/0){let n=new Set,r=[];for(let s of e){if(r.length>=t)break;let o=J(s.merchant_name,"Unknown merchant"),i=J(s.tool_name,"unknown_tool"),a=`${o} :: ${i}`;n.has(a)||(n.add(a),r.push(`${o} [${i}]`))}return r}function Nr(e){let t=J(e.merchant_name,"Unknown merchant"),n=J(e.tool_name,"unknown_tool"),r=ne(oe(e.amount)),s=J(e.status,"unknown"),o=jr(e.created_at);return`${r} ${s.padEnd(9)} ${t} [${n}] ${o}`}function Ir(e){let t=J(e.brand?.toUpperCase(),"CARD"),n=e.isDefault?" default":"";return`${Number.isInteger(e.id)?`#${e.id} `:""}${t} ****${e.last4}${n}`}function Mr(e){return{dailyLimit:oe(e?.daily_limit??e?.dailyLimit??0)}}function oe(e){let t=Number(typeof e=="string"?e:e??0);return Number.isFinite(t)?t:0}function ne(e){return`$${e.toFixed(2)}`}function Qt(e,t=20){let n=Math.max(0,Math.min(1,e)),r=Math.round(n*t);return`[${"\u2588".repeat(r)}${"\u2591".repeat(t-r)}]`}function J(e,t){let n=et(e??"").trim();return n.length>0?n:t}function jr(e){if(!e)return"unknown time";let t=new Date(e);return Number.isNaN(t.getTime())?J(e,"unknown time"):t.toISOString().slice(0,16).replace("T"," ")}function et(e){return e.replace(/\u001B\][^\u0007]*(?:\u0007|\u001B\\)/g,"").replace(/\u001B\[[0-?]*[ -/]*[@-~]/g,"").replace(/[\u0000-\u0008\u000B-\u001F\u007F-\u009F]/g,"").replace(/\s+/g," ")}var h=g(require("fs")),Re=g(require("os")),w=g(require("path")),nn=require("child_process"),Or=2,xe="# >>> visa-cli shell hud v2 >>>",ke="# <<< visa-cli shell hud v2 <<<",Dr="# >>> visa-cli shell hud >>>",Hr="# <<< visa-cli shell hud <<<",rn=3e4,Ur=3e4;function st(){try{return w.join(dn(),".visa-cli")}catch{return w.join(Re.tmpdir(),".visa-cli")}}function ae(){return w.join(st(),"shell-hud.json")}function Te(){return w.join(st(),"shell-hud.line")}function sn(){return w.join(st(),"shell-hud.lock")}function Ae(e){let t=e??process.env.SHELL;if(!t)return null;let n=w.basename(t.replace(/\\/g,"/")).toLowerCase();return n==="zsh"?"zsh":n==="bash"?"bash":n==="pwsh"||n==="pwsh.exe"||n==="powershell"||n==="powershell.exe"?"powershell":null}function Le(e){let t=dn();if(e==="zsh")return w.join(t,".zshrc");if(e==="bash")return w.join(t,".bashrc");let n=(process.platform==="win32","PowerShell");return w.join(t,"Documents",n,"Microsoft.PowerShell_profile.ps1")}function Vr(e){let t="$HOME/.visa-cli/shell-hud.line",n=Wr(e),r=Jr(e);if(e==="zsh")return`${xe}
32
+ `}function Rr(e){return e.tool_name!=null}function Ar(e){return oe(e.amount)===0&&e.status==="failed"}function Lr(e){return Rr(e)&&!Ar(e)}function Ir(e,t=1/0){let n=new Set,r=[];for(let s of e){if(r.length>=t)break;let o=Y(s.merchant_name,"Unknown merchant"),i=Y(s.tool_name,"unknown_tool"),a=`${o} :: ${i}`;n.has(a)||(n.add(a),r.push(`${o} [${i}]`))}return r}function Nr(e){let t=Y(e.merchant_name,"Unknown merchant"),n=Y(e.tool_name,"unknown_tool"),r=re(oe(e.amount)),s=Y(e.status,"unknown"),o=Or(e.created_at);return`${r} ${s.padEnd(9)} ${t} [${n}] ${o}`}function Dr(e){let t=Y(e.brand?.toUpperCase(),"CARD"),n=e.isDefault?" default":"";return`${Number.isInteger(e.id)?`#${e.id} `:""}${t} ****${e.last4}${n}`}function Mr(e){return{dailyLimit:oe(e?.daily_limit??e?.dailyLimit??0)}}function oe(e){let t=Number(typeof e=="string"?e:e??0);return Number.isFinite(t)?t:0}function re(e){return`$${e.toFixed(2)}`}function en(e,t=20){let n=Math.max(0,Math.min(1,e)),r=Math.round(n*t);return`[${"\u2588".repeat(r)}${"\u2591".repeat(t-r)}]`}function Y(e,t){let n=tt(e??"").trim();return n.length>0?n:t}function Or(e){if(!e)return"unknown time";let t=new Date(e);return Number.isNaN(t.getTime())?Y(e,"unknown time"):t.toISOString().slice(0,16).replace("T"," ")}function tt(e){return e.replace(/\u001B\][^\u0007]*(?:\u0007|\u001B\\)/g,"").replace(/\u001B\[[0-?]*[ -/]*[@-~]/g,"").replace(/[\u0000-\u0008\u000B-\u001F\u007F-\u009F]/g,"").replace(/\s+/g," ")}var h=g(require("fs")),Te=g(require("os")),w=g(require("path")),rn=require("child_process"),jr=2,xe="# >>> visa-cli shell hud v2 >>>",ke="# <<< visa-cli shell hud v2 <<<",Ur="# >>> visa-cli shell hud >>>",Hr="# <<< visa-cli shell hud <<<",sn=3e4,Vr=3e4;function ot(){try{return w.join(fn(),".visa-cli")}catch{return w.join(Te.tmpdir(),".visa-cli")}}function ae(){return w.join(ot(),"shell-hud.json")}function Re(){return w.join(ot(),"shell-hud.line")}function on(){return w.join(ot(),"shell-hud.lock")}function Ae(e){let t=e??process.env.SHELL;if(!t)return null;let n=w.basename(t.replace(/\\/g,"/")).toLowerCase();return n==="zsh"?"zsh":n==="bash"?"bash":n==="pwsh"||n==="pwsh.exe"||n==="powershell"||n==="powershell.exe"?"powershell":null}function Le(e){let t=fn();if(e==="zsh")return w.join(t,".zshrc");if(e==="bash")return w.join(t,".bashrc");let n=(process.platform==="win32","PowerShell");return w.join(t,"Documents",n,"Microsoft.PowerShell_profile.ps1")}function Fr(e){let t="$HOME/.visa-cli/shell-hud.line",n=Jr(e),r=zr(e);if(e==="zsh")return`${xe}
33
33
  _visa_cli_shell_hud_precmd() {
34
34
  setopt localoptions no_bg_nice
35
35
  if [[ -f "${t}" ]]; then
@@ -82,34 +82,34 @@ case ";$PROMPT_COMMAND;" in
82
82
  *";__visa_cli_shell_hud_precmd;"*) ;;
83
83
  *) PROMPT_COMMAND="__visa_cli_shell_hud_precmd\${PROMPT_COMMAND:+;$PROMPT_COMMAND}" ;;
84
84
  esac
85
- ${ke}`}function on(e){let t=e;for(let[n,r]of[[xe,ke],[Dr,Hr]])t=t.replace(new RegExp(`\\n?${tn(n)}[\\s\\S]*?${tn(r)}\\n?`,"g"),"");return t.trimEnd()}function Fr(e,t){let n=on(e).trimEnd(),r=Vr(t);return n.length>0?`${n}
85
+ ${ke}`}function an(e){let t=e;for(let[n,r]of[[xe,ke],[Ur,Hr]])t=t.replace(new RegExp(`\\n?${nn(n)}[\\s\\S]*?${nn(r)}\\n?`,"g"),"");return t.trimEnd()}function Br(e,t){let n=an(e).trimEnd(),r=Fr(t);return n.length>0?`${n}
86
86
 
87
87
  ${r}
88
88
  `:`${r}
89
- `}function an(e=Ae()){if(!e)return{installed:!1,changed:!1,shell:null,message:"Shell HUD auto-install skipped: supported shells are zsh, bash, and PowerShell."};let t;try{t=Le(e);let n=h.existsSync(t)?h.readFileSync(t,"utf-8"):"",r=Fr(n,e),s=r!==n;return s&&Ee(t,r),{installed:!0,changed:s,shell:e,rcPath:t,message:s?`Persistent shell HUD installed in ${t}. Open a new terminal to start seeing it. Disable it any time with: visa-cli shell-hud disable`:`Persistent shell HUD already installed in ${t}. Disable it any time with: visa-cli shell-hud disable`}}catch(n){return{installed:!1,changed:!1,shell:e,rcPath:t,message:`Failed to install persistent shell HUD in ${t}: ${fn(n)}`}}}function cn(e=Ae()){if(!e)return{removed:!1,shell:null,message:"Shell HUD uninstall skipped: supported shells are zsh, bash, and PowerShell."};let t;try{if(t=Le(e),!h.existsSync(t))return{removed:!1,shell:e,rcPath:t,message:`No ${e} rc file found at ${t}.`};let n=h.readFileSync(t,"utf-8"),r=on(n);return r===n.trimEnd()?{removed:!1,shell:e,rcPath:t,message:`Persistent shell HUD was not installed in ${t}.`}:(Ee(t,r.length>0?`${r}
90
- `:""),{removed:!0,shell:e,rcPath:t,message:`Removed persistent shell HUD from ${t}.`})}catch(n){return{removed:!1,shell:e,rcPath:t,message:`Failed to remove persistent shell HUD from ${t}: ${fn(n)}`}}}function ot(e,t){let n=Pe(t.currentVersion),r=` ${N("\u2502",A.dim)} `;if(!e.enrolled)return`${N("VISA CLI",A.visaBlue)} ${N(`v${n}`,A.visaBlueSoft)}${r}${N("setup needed",A.visaGold)}`;let s=tt(e.spendingControls?.daily_limit??e.spendingControls?.dailyLimit),o=Math.max(0,tt(e.dailySpent)),i=s>0?Math.min(s,Math.max(0,tt(e.dailyRemaining??s-o))):0,a=s>0?Math.max(0,Math.min(1,o/s)):0,c=qr(e),d=s>0?`${Kr(a)} ${N(`${nt(i)} left today`,A.green)} ${N(`(${nt(o)}/${nt(s)}/day)`,A.dim)}`:N("no spend limit",A.dim);return`${N("VISA CLI",A.visaBlue)} ${N(`v${n}`,A.visaBlueSoft)}${r}${N(c,A.visaGold)}${r}${d}`}function ln(){let e=un();return!!e&&Date.now()-e.renderedAt<=rn}function it(){let e=un();if(e&&Date.now()-e.renderedAt<=rn||(Br(),e?.line))return e.line;try{let t=Te();if(h.existsSync(t))return h.readFileSync(t,"utf-8").trimEnd()}catch{}return"VISA | loading spend HUD\u2026"}function at(e){try{let t=w.dirname(ae());h.mkdirSync(t,{recursive:!0});let n=Pe(e),r={hudVersion:Or,renderedAt:Date.now(),line:n};Ee(ae(),JSON.stringify(r)+`
91
- `),Ee(Te(),n+`
92
- `)}catch{}}function ie(){try{h.unlinkSync(sn())}catch{}}function un(){let e=ae();if(!h.existsSync(e))return null;try{return JSON.parse(h.readFileSync(e,"utf-8"))}catch{return null}}function Br(){let e=sn();try{if(h.mkdirSync(w.dirname(e),{recursive:!0}),!zr(e))return;let t=process.argv[1]?w.resolve(process.argv[1]):"";if(!t){ie();return}let n=(0,nn.spawn)(process.execPath,[t,"shell-hud","refresh"],{detached:!0,stdio:"ignore",env:{...process.env,VISA_CLI_SHELL_HUD_BACKGROUND:"1"}});n.once("error",ie),n.unref()}catch{ie()}}function tt(e){let t=Number(typeof e=="string"?e:e??0);return Number.isFinite(t)?t:0}function Pe(e){return e.replace(/\u001B\][^\u0007]*(?:\u0007|\u001B\\)/g,"").replace(/\u001B\[[0-?]*[ -/]*[@-~]/g,"").replace(/\u001B[P_^][^\u001B]*(?:\u001B\\|\u0007)/g,"").replace(/[\u0000-\u0008\u000B-\u001F\u007F-\u009F]/g,"").replace(/\s+/g," ").trim()}function Kr(e){let n=Math.round(Math.max(0,Math.min(1,e))*10),r="\u2588".repeat(n),s="\u2591".repeat(10-n);return`${N(r||"",A.green)}${N(s||"",A.dim)}`}function nt(e){return`$${e.toFixed(2)}`}function qr(e){let t=e.cards?.find(a=>a.isDefault)??e.cards?.[0];if(!t)return"card none";let n=typeof t.brand=="string"?t.brand:"card",r=typeof t.last4=="string"?t.last4:"????",s=Pe(n.toUpperCase()),o=Pe(r);return`${t.isDefault?"default":"active"} ${s} ****${o}`}function Gr(){let e=(process.env.COLORTERM??"").toLowerCase();if(e==="truecolor"||e==="24bit")return!0;let t=(process.env.TERM??"").toLowerCase();return t.includes("truecolor")||t.includes("24bit")}var rt=Gr(),A={reset:"\x1B[0m",visaBlue:rt?"\x1B[38;2;20;52;203m":"\x1B[38;5;27m",visaBlueSoft:rt?"\x1B[38;2;97;126;229m":"\x1B[38;5;111m",visaGold:rt?"\x1B[38;2;247;182;0m":"\x1B[38;5;220m",green:"\x1B[38;5;48m",dim:"\x1B[2m"};function N(e,t){return e.length===0||process.env.NO_COLOR?e:`${t}${e}${A.reset}`}function tn(e){return e.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}function dn(){let e=Re.homedir();if(!e||!w.isAbsolute(e))throw new Error("unable to determine a valid home directory");return w.resolve(e)}function Wr(e){return e==="powershell"?"& visa-cli shell-hud refresh":"visa-cli shell-hud refresh"}function Jr(e){return e==="powershell"?"Get-Command visa-cli -ErrorAction SilentlyContinue -CommandType Application":"command -v visa-cli >/dev/null 2>&1"}function zr(e){for(let t=0;t<2;t+=1){let n;try{return n=h.openSync(e,"wx"),h.writeFileSync(n,String(Date.now())),!0}catch(r){if(r?.code!=="EEXIST")return!1;try{let s=h.statSync(e);if(Date.now()-s.mtimeMs<=Ur)return!1;h.unlinkSync(e)}catch{}}finally{n!==void 0&&h.closeSync(n)}}return!1}function fn(e){return e instanceof Error?e.message:"unknown file system error"}function Ee(e,t){h.mkdirSync(w.dirname(e),{recursive:!0});let n=`${e}.${process.pid}.${Date.now()}.tmp`;h.writeFileSync(n,t),h.renameSync(n,e)}var R=class extends Error{constructor(t){super(t),this.name="PayValidationError"}},pn=["GET","POST"];function mn(e){let t;try{t=new URL(e)}catch{throw new R(`Invalid URL: ${e}. Expected a fully-qualified http(s) URL.`)}if(t.protocol!=="http:"&&t.protocol!=="https:")throw new R(`Unsupported URL scheme "${t.protocol}". Only http and https are allowed.`);return t}function gn(e){let t=(e??"GET").toUpperCase();if(!pn.includes(t))throw new R(`Unsupported HTTP method "${e}". Supported: ${pn.join(", ")}.`);return t}function hn(e){if(e!==void 0){try{JSON.parse(e)}catch(t){throw new R(`--body is not valid JSON: ${t?.message??"parse error"}`)}return e}}function yn(e){if(!e||typeof e!="object")throw new R("Merchant returned no payment preview.");let t=e;if(typeof t.amount!="number"||!Number.isFinite(t.amount)||t.amount<=0)throw new R("Could not determine payment amount from merchant.");if(typeof t.merchantName!="string"||t.merchantName.trim().length===0)throw new R("Merchant returned an empty merchant name.");if(t.merchantName.length>200)throw new R(`Merchant name too long (${t.merchantName.length} chars).`);if(typeof t.currency!="string"||t.currency.trim().length===0)throw new R("Merchant returned an empty currency.");if(t.currency.length>10)throw new R(`Currency code too long (${t.currency.length} chars).`);return{amount:t.amount,currency:t.currency,merchantName:t.merchantName}}var m=g(require("fs")),p=g(require("path")),Sn=g(require("os")),_=Sn.homedir(),Yr=["Claude_","Anthropic.ClaudeDesktop_"];function vn(){return process.env.APPDATA||p.join(_,"AppData","Roaming")}function Xr(){return process.env.LOCALAPPDATA||p.join(_,"AppData","Local")}function bn(){if(process.platform!=="win32")return;let e=p.join(Xr(),"Packages");if(m.existsSync(e))try{let t=m.readdirSync(e,"utf-8");for(let n of Yr){let r=t.filter(s=>s.startsWith(n)).sort()[0];if(r)return p.join(e,r,"LocalCache","Roaming","Claude")}}catch{return}}function wn(){if(process.platform==="win32"){let e=bn();return e?p.join(e,"claude_desktop_config.json"):p.join(vn(),"Claude","claude_desktop_config.json")}return p.join(_,"Library","Application Support","Claude","claude_desktop_config.json")}function _n(){if(process.platform!=="win32")return[p.join(_,"Library","Application Support","Claude")];let e=[p.join(vn(),"Claude")],t=bn();return t&&e.push(t),e}function Ne(e){return e.id==="claude-desktop"?wn():e.globalConfigPath}function Zr(e){return e.id==="claude-desktop"?_n():e.detectPaths}var M=[{id:"claude",displayName:"Claude Code",globalConfigPath:p.join(_,".claude.json"),configKey:"mcpServers",detectPaths:[p.join(_,".claude.json")],postInstallHint:"Restart Claude Code or run /mcp to connect."},{id:"claude-desktop",displayName:"Claude Desktop",globalConfigPath:wn(),configKey:"mcpServers",detectPaths:_n(),postInstallHint:"Restart the Claude desktop app to connect."},{id:"cursor",displayName:"Cursor",globalConfigPath:p.join(_,".cursor","mcp.json"),configKey:"mcpServers",detectPaths:[p.join(_,".cursor")],postInstallHint:"Restart Cursor to connect."},{id:"windsurf",displayName:"Windsurf",globalConfigPath:p.join(_,".codeium","windsurf","mcp_config.json"),configKey:"mcpServers",detectPaths:[p.join(_,".codeium","windsurf")],postInstallHint:"Restart Windsurf to connect."},{id:"cline",displayName:"Cline",globalConfigPath:p.join(_,".vscode","mcp.json"),configKey:"mcpServers",detectPaths:[p.join(_,".vscode","extensions","saoudrizwan.claude-dev-*")],postInstallHint:"Restart VS Code to connect."},{id:"roo-code",displayName:"Roo Code",globalConfigPath:p.join(_,".config","Roo","mcp_settings.json"),configKey:"mcpServers",detectPaths:[p.join(_,".vscode","extensions","RooVeterinaryInc.roo-cline-*")],postInstallHint:"Restart VS Code to connect."},{id:"copilot",displayName:"VS Code Copilot",globalConfigPath:p.join(_,".vscode","mcp.json"),configKey:"servers",detectPaths:[p.join(_,".vscode")],postInstallHint:"Restart VS Code to connect."},{id:"zed",displayName:"Zed",globalConfigPath:p.join(_,".config","zed","settings.json"),configKey:"context_servers",detectPaths:[p.join(_,".config","zed")],postInstallHint:"Restart Zed to connect.",buildEntry:e=>({source:"custom",...e})},{id:"codex",displayName:"Codex",globalConfigPath:p.join(_,".codex","config.toml"),configKey:"mcp_servers",configFormat:"toml",detectPaths:[p.join(_,".codex")],postInstallHint:"Restart Codex to connect."}];function ct(e){return M.find(t=>t.id===e)}function ce(e){return Zr(e).some(t=>{if(t.includes("*")){let n=p.dirname(t),r=p.basename(t).replaceAll("*","");if(!m.existsSync(n))return!1;try{return m.readdirSync(n).some(s=>s.startsWith(r))}catch{return!1}}return m.existsSync(t)})}function $n(){return{command:"node",args:[p.resolve(__dirname,"mcp-server/index.js")]}}function lt(e,t){return t==="project"?"json":e.configFormat??"json"}function Qr(e){if(e=e.trim(),e==="true")return!0;if(e==="false")return!1;if(e.startsWith('"')&&e.endsWith('"'))return e.slice(1,-1);if(e.startsWith("[")&&e.endsWith("]")){let n=e.slice(1,-1).trim();return n.length===0?[]:n.split(",").map(r=>r.trim()).filter(Boolean).map(r=>r.startsWith('"')&&r.endsWith('"')?r.slice(1,-1):r)}let t=Number(e);return isNaN(t)?e:t}function ut(e,t){let n=`[mcp_servers.${t}]`,r=e.findIndex(o=>o.trim()===n);if(r===-1)return;let s=r+1;for(;s<e.length&&!e[s].trim().startsWith("[");)s++;return{start:r,end:s}}function dt(e,t){let n=e.split(`
93
- `),r=ut(n,t);if(!r)return;let s={};for(let o=r.start+1;o<r.end;o++){let i=n[o].trim().match(/^(\w+)\s*=\s*(.+)$/);i&&(s[i[1]]=Qr(i[2]))}return Object.keys(s).length>0?s:void 0}function es(e,t,n){let r=`[${n.args.map(c=>`"${c}"`).join(", ")}]`,s=[`[mcp_servers.${t}]`,`command = "${n.command}"`,`args = ${r}`],o=e.split(`
94
- `),i=ut(o,t);if(i){o.splice(i.start,i.end-i.start,...s);let c=o.join(`
89
+ `}function cn(e=Ae()){if(!e)return{installed:!1,changed:!1,shell:null,message:"Shell HUD auto-install skipped: supported shells are zsh, bash, and PowerShell."};let t;try{t=Le(e);let n=h.existsSync(t)?h.readFileSync(t,"utf-8"):"",r=Br(n,e),s=r!==n;return s&&Ee(t,r),{installed:!0,changed:s,shell:e,rcPath:t,message:s?`Persistent shell HUD installed in ${t}. Open a new terminal to start seeing it. Disable it any time with: visa-cli shell-hud disable`:`Persistent shell HUD already installed in ${t}. Disable it any time with: visa-cli shell-hud disable`}}catch(n){return{installed:!1,changed:!1,shell:e,rcPath:t,message:`Failed to install persistent shell HUD in ${t}: ${pn(n)}`}}}function ln(e=Ae()){if(!e)return{removed:!1,shell:null,message:"Shell HUD uninstall skipped: supported shells are zsh, bash, and PowerShell."};let t;try{if(t=Le(e),!h.existsSync(t))return{removed:!1,shell:e,rcPath:t,message:`No ${e} rc file found at ${t}.`};let n=h.readFileSync(t,"utf-8"),r=an(n);return r===n.trimEnd()?{removed:!1,shell:e,rcPath:t,message:`Persistent shell HUD was not installed in ${t}.`}:(Ee(t,r.length>0?`${r}
90
+ `:""),{removed:!0,shell:e,rcPath:t,message:`Removed persistent shell HUD from ${t}.`})}catch(n){return{removed:!1,shell:e,rcPath:t,message:`Failed to remove persistent shell HUD from ${t}: ${pn(n)}`}}}function it(e,t){let n=Pe(t.currentVersion),r=` ${I("\u2502",A.dim)} `;if(!e.enrolled)return`${I("VISA CLI",A.visaBlue)} ${I(`v${n}`,A.visaBlueSoft)}${r}${I("setup needed",A.visaGold)}`;let s=nt(e.spendingControls?.daily_limit??e.spendingControls?.dailyLimit),o=Math.max(0,nt(e.dailySpent)),i=s>0?Math.min(s,Math.max(0,nt(e.dailyRemaining??s-o))):0,a=s>0?Math.max(0,Math.min(1,o/s)):0,c=Gr(e),d=s>0?`${qr(a)} ${I(`${rt(i)} left today`,A.green)} ${I(`(${rt(o)}/${rt(s)}/day)`,A.dim)}`:I("no spend limit",A.dim);return`${I("VISA CLI",A.visaBlue)} ${I(`v${n}`,A.visaBlueSoft)}${r}${I(c,A.visaGold)}${r}${d}`}function un(){let e=dn();return!!e&&Date.now()-e.renderedAt<=sn}function at(){let e=dn();if(e&&Date.now()-e.renderedAt<=sn||(Kr(),e?.line))return e.line;try{let t=Re();if(h.existsSync(t))return h.readFileSync(t,"utf-8").trimEnd()}catch{}return"VISA | loading spend HUD\u2026"}function ct(e){try{let t=w.dirname(ae());h.mkdirSync(t,{recursive:!0});let n=Pe(e),r={hudVersion:jr,renderedAt:Date.now(),line:n};Ee(ae(),JSON.stringify(r)+`
91
+ `),Ee(Re(),n+`
92
+ `)}catch{}}function ie(){try{h.unlinkSync(on())}catch{}}function dn(){let e=ae();if(!h.existsSync(e))return null;try{return JSON.parse(h.readFileSync(e,"utf-8"))}catch{return null}}function Kr(){let e=on();try{if(h.mkdirSync(w.dirname(e),{recursive:!0}),!Yr(e))return;let t=process.argv[1]?w.resolve(process.argv[1]):"";if(!t){ie();return}let n=(0,rn.spawn)(process.execPath,[t,"shell-hud","refresh"],{detached:!0,stdio:"ignore",env:{...process.env,VISA_CLI_SHELL_HUD_BACKGROUND:"1"}});n.once("error",ie),n.unref()}catch{ie()}}function nt(e){let t=Number(typeof e=="string"?e:e??0);return Number.isFinite(t)?t:0}function Pe(e){return e.replace(/\u001B\][^\u0007]*(?:\u0007|\u001B\\)/g,"").replace(/\u001B\[[0-?]*[ -/]*[@-~]/g,"").replace(/\u001B[P_^][^\u001B]*(?:\u001B\\|\u0007)/g,"").replace(/[\u0000-\u0008\u000B-\u001F\u007F-\u009F]/g,"").replace(/\s+/g," ").trim()}function qr(e){let n=Math.round(Math.max(0,Math.min(1,e))*10),r="\u2588".repeat(n),s="\u2591".repeat(10-n);return`${I(r||"",A.green)}${I(s||"",A.dim)}`}function rt(e){return`$${e.toFixed(2)}`}function Gr(e){let t=e.cards?.find(a=>a.isDefault)??e.cards?.[0];if(!t)return"card none";let n=typeof t.brand=="string"?t.brand:"card",r=typeof t.last4=="string"?t.last4:"????",s=Pe(n.toUpperCase()),o=Pe(r);return`${t.isDefault?"default":"active"} ${s} ****${o}`}function Wr(){let e=(process.env.COLORTERM??"").toLowerCase();if(e==="truecolor"||e==="24bit")return!0;let t=(process.env.TERM??"").toLowerCase();return t.includes("truecolor")||t.includes("24bit")}var st=Wr(),A={reset:"\x1B[0m",visaBlue:st?"\x1B[38;2;20;52;203m":"\x1B[38;5;27m",visaBlueSoft:st?"\x1B[38;2;97;126;229m":"\x1B[38;5;111m",visaGold:st?"\x1B[38;2;247;182;0m":"\x1B[38;5;220m",green:"\x1B[38;5;48m",dim:"\x1B[2m"};function I(e,t){return e.length===0||process.env.NO_COLOR?e:`${t}${e}${A.reset}`}function nn(e){return e.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}function fn(){let e=Te.homedir();if(!e||!w.isAbsolute(e))throw new Error("unable to determine a valid home directory");return w.resolve(e)}function Jr(e){return e==="powershell"?"& visa-cli shell-hud refresh":"visa-cli shell-hud refresh"}function zr(e){return e==="powershell"?"Get-Command visa-cli -ErrorAction SilentlyContinue -CommandType Application":"command -v visa-cli >/dev/null 2>&1"}function Yr(e){for(let t=0;t<2;t+=1){let n;try{return n=h.openSync(e,"wx"),h.writeFileSync(n,String(Date.now())),!0}catch(r){if(r?.code!=="EEXIST")return!1;try{let s=h.statSync(e);if(Date.now()-s.mtimeMs<=Vr)return!1;h.unlinkSync(e)}catch{}}finally{n!==void 0&&h.closeSync(n)}}return!1}function pn(e){return e instanceof Error?e.message:"unknown file system error"}function Ee(e,t){h.mkdirSync(w.dirname(e),{recursive:!0});let n=`${e}.${process.pid}.${Date.now()}.tmp`;h.writeFileSync(n,t),h.renameSync(n,e)}var R=class extends Error{constructor(t){super(t),this.name="PayValidationError"}},mn=["GET","POST"];function gn(e){let t;try{t=new URL(e)}catch{throw new R(`Invalid URL: ${e}. Expected a fully-qualified http(s) URL.`)}if(t.protocol!=="http:"&&t.protocol!=="https:")throw new R(`Unsupported URL scheme "${t.protocol}". Only http and https are allowed.`);return t}function hn(e){let t=(e??"GET").toUpperCase();if(!mn.includes(t))throw new R(`Unsupported HTTP method "${e}". Supported: ${mn.join(", ")}.`);return t}function yn(e){if(e!==void 0){try{JSON.parse(e)}catch(t){throw new R(`--body is not valid JSON: ${t?.message??"parse error"}`)}return e}}function Sn(e){if(!e||typeof e!="object")throw new R("Merchant returned no payment preview.");let t=e;if(typeof t.amount!="number"||!Number.isFinite(t.amount)||t.amount<=0)throw new R("Could not determine payment amount from merchant.");if(typeof t.merchantName!="string"||t.merchantName.trim().length===0)throw new R("Merchant returned an empty merchant name.");if(t.merchantName.length>200)throw new R(`Merchant name too long (${t.merchantName.length} chars).`);if(typeof t.currency!="string"||t.currency.trim().length===0)throw new R("Merchant returned an empty currency.");if(t.currency.length>10)throw new R(`Currency code too long (${t.currency.length} chars).`);return{amount:t.amount,currency:t.currency,merchantName:t.merchantName}}var m=g(require("fs")),p=g(require("path")),bn=g(require("os")),_=bn.homedir(),Xr=["Claude_","Anthropic.ClaudeDesktop_"];function vn(){return process.env.APPDATA||p.join(_,"AppData","Roaming")}function Zr(){return process.env.LOCALAPPDATA||p.join(_,"AppData","Local")}function wn(){if(process.platform!=="win32")return;let e=p.join(Zr(),"Packages");if(m.existsSync(e))try{let t=m.readdirSync(e,"utf-8");for(let n of Xr){let r=t.filter(s=>s.startsWith(n)).sort()[0];if(r)return p.join(e,r,"LocalCache","Roaming","Claude")}}catch{return}}function _n(){if(process.platform==="win32"){let e=wn();return e?p.join(e,"claude_desktop_config.json"):p.join(vn(),"Claude","claude_desktop_config.json")}return p.join(_,"Library","Application Support","Claude","claude_desktop_config.json")}function $n(){if(process.platform!=="win32")return[p.join(_,"Library","Application Support","Claude")];let e=[p.join(vn(),"Claude")],t=wn();return t&&e.push(t),e}function Ie(e){return e.id==="claude-desktop"?_n():e.globalConfigPath}function Qr(e){return e.id==="claude-desktop"?$n():e.detectPaths}var D=[{id:"claude",displayName:"Claude Code",globalConfigPath:p.join(_,".claude.json"),configKey:"mcpServers",detectPaths:[p.join(_,".claude.json")],postInstallHint:"Restart Claude Code or run /mcp to connect."},{id:"claude-desktop",displayName:"Claude Desktop",globalConfigPath:_n(),configKey:"mcpServers",detectPaths:$n(),postInstallHint:"Restart the Claude desktop app to connect."},{id:"cursor",displayName:"Cursor",globalConfigPath:p.join(_,".cursor","mcp.json"),configKey:"mcpServers",detectPaths:[p.join(_,".cursor")],postInstallHint:"Restart Cursor to connect."},{id:"windsurf",displayName:"Windsurf",globalConfigPath:p.join(_,".codeium","windsurf","mcp_config.json"),configKey:"mcpServers",detectPaths:[p.join(_,".codeium","windsurf")],postInstallHint:"Restart Windsurf to connect."},{id:"cline",displayName:"Cline",globalConfigPath:p.join(_,".vscode","mcp.json"),configKey:"mcpServers",detectPaths:[p.join(_,".vscode","extensions","saoudrizwan.claude-dev-*")],postInstallHint:"Restart VS Code to connect."},{id:"roo-code",displayName:"Roo Code",globalConfigPath:p.join(_,".config","Roo","mcp_settings.json"),configKey:"mcpServers",detectPaths:[p.join(_,".vscode","extensions","RooVeterinaryInc.roo-cline-*")],postInstallHint:"Restart VS Code to connect."},{id:"copilot",displayName:"VS Code Copilot",globalConfigPath:p.join(_,".vscode","mcp.json"),configKey:"servers",detectPaths:[p.join(_,".vscode")],postInstallHint:"Restart VS Code to connect."},{id:"zed",displayName:"Zed",globalConfigPath:p.join(_,".config","zed","settings.json"),configKey:"context_servers",detectPaths:[p.join(_,".config","zed")],postInstallHint:"Restart Zed to connect.",buildEntry:e=>({source:"custom",...e})},{id:"codex",displayName:"Codex",globalConfigPath:p.join(_,".codex","config.toml"),configKey:"mcp_servers",configFormat:"toml",detectPaths:[p.join(_,".codex")],postInstallHint:"Restart Codex to connect."}];function lt(e){return D.find(t=>t.id===e)}function ce(e){return Qr(e).some(t=>{if(t.includes("*")){let n=p.dirname(t),r=p.basename(t).replaceAll("*","");if(!m.existsSync(n))return!1;try{return m.readdirSync(n).some(s=>s.startsWith(r))}catch{return!1}}return m.existsSync(t)})}function Cn(){return{command:"node",args:[p.resolve(__dirname,"mcp-server/index.js")]}}function ut(e,t){return t==="project"?"json":e.configFormat??"json"}function es(e){if(e=e.trim(),e==="true")return!0;if(e==="false")return!1;if(e.startsWith('"')&&e.endsWith('"'))return e.slice(1,-1);if(e.startsWith("[")&&e.endsWith("]")){let n=e.slice(1,-1).trim();return n.length===0?[]:n.split(",").map(r=>r.trim()).filter(Boolean).map(r=>r.startsWith('"')&&r.endsWith('"')?r.slice(1,-1):r)}let t=Number(e);return isNaN(t)?e:t}function dt(e,t){let n=`[mcp_servers.${t}]`,r=e.findIndex(o=>o.trim()===n);if(r===-1)return;let s=r+1;for(;s<e.length&&!e[s].trim().startsWith("[");)s++;return{start:r,end:s}}function ft(e,t){let n=e.split(`
93
+ `),r=dt(n,t);if(!r)return;let s={};for(let o=r.start+1;o<r.end;o++){let i=n[o].trim().match(/^(\w+)\s*=\s*(.+)$/);i&&(s[i[1]]=es(i[2]))}return Object.keys(s).length>0?s:void 0}function ts(e,t,n){let r=`[${n.args.map(c=>`"${c}"`).join(", ")}]`,s=[`[mcp_servers.${t}]`,`command = "${n.command}"`,`args = ${r}`],o=e.split(`
94
+ `),i=dt(o,t);if(i){o.splice(i.start,i.end-i.start,...s);let c=o.join(`
95
95
  `);return c.endsWith(`
96
96
  `)?c:c+`
97
97
  `}let a=e.trimEnd();return a+(a.length>0?`
98
98
 
99
99
  `:"")+s.join(`
100
100
  `)+`
101
- `}function ts(e,t){let n=e.split(`
102
- `),r=ut(n,t);return r?(n.splice(r.start,r.end-r.start),n.join(`
101
+ `}function ns(e,t){let n=e.split(`
102
+ `),r=dt(n,t);return r?(n.splice(r.start,r.end-r.start),n.join(`
103
103
  `).replace(/\n{3,}/g,`
104
104
 
105
- `)):e}function le(e,t="global"){let n=t==="project"?p.join(process.cwd(),".mcp.json"):Ne(e),r=p.dirname(n);m.existsSync(r)||m.mkdirSync(r,{recursive:!0});let s=lt(e,t),o=$n();if(s==="toml"){let i=m.existsSync(n)?m.readFileSync(n,"utf-8"):"",a=es(i,"visa-cli",o);m.writeFileSync(n,a)}else{let i={};if(m.existsSync(n))try{i=JSON.parse(m.readFileSync(n,"utf-8"))}catch{i={}}i[e.configKey]=i[e.configKey]||{},i[e.configKey]["visa-cli"]=e.buildEntry?e.buildEntry(o):o,m.writeFileSync(n,JSON.stringify(i,null,2)+`
106
- `)}return{installed:!0,configPath:n,message:e.postInstallHint}}function ft(e,t="global"){let n=t==="project"?p.join(process.cwd(),".mcp.json"):Ne(e);if(!m.existsSync(n))return{removed:!1,configPath:n};if(lt(e,t)==="toml"){let i=m.readFileSync(n,"utf-8");return dt(i,"visa-cli")?(m.writeFileSync(n,ts(i,"visa-cli")),{removed:!0,configPath:n}):{removed:!1,configPath:n}}let s;try{s=JSON.parse(m.readFileSync(n,"utf-8"))}catch{return{removed:!1,configPath:n}}let o=s[e.configKey];return!o||!o["visa-cli"]?{removed:!1,configPath:n}:(delete o["visa-cli"],m.writeFileSync(n,JSON.stringify(s,null,2)+`
107
- `),{removed:!0,configPath:n})}function Cn(e,t="global"){let n=t==="project"?p.join(process.cwd(),".mcp.json"):Ne(e);if(!m.existsSync(n))return!1;if(lt(e,t)==="toml")try{let s=m.readFileSync(n,"utf-8");return!!dt(s,"visa-cli")}catch{return!1}try{return!!JSON.parse(m.readFileSync(n,"utf-8"))?.[e.configKey]?.["visa-cli"]}catch{return!1}}function ns(e){if(!e||typeof e!="object")return;let t=e;if(t.command!=="node"||!Array.isArray(t.args)||t.args.length===0)return;let n=t.args[t.args.length-1];if(!(typeof n!="string"||n.length===0))return n}function rs(e,t){if(e===t)return!0;let n=p.resolve(e),r=p.resolve(t);if(n===r)return!0;try{let s=m.realpathSync(n),o=m.realpathSync(r);return s===o}catch{return!1}}function ue(){let e=$n(),t=e.args[e.args.length-1],n=[];for(let r of M){let s=Ne(r);if(!m.existsSync(s))continue;let o=r.configFormat??"json",i;if(o==="toml")try{let d=m.readFileSync(s,"utf-8");i=dt(d,"visa-cli")}catch{continue}else{let d;try{d=JSON.parse(m.readFileSync(s,"utf-8"))}catch{continue}i=d?.[r.configKey]?.["visa-cli"]}if(!i)continue;let a=ns(i);if(!a||rs(a,t))continue;let c=m.existsSync(a)?"mismatch":"missing";n.push({client:r,configPath:s,currentPath:a,expectedPath:t,staleReason:c})}return n}function pt(e){return{configPath:le(e.client,"global").configPath}}var ss=(0,Rn.promisify)(En.execFile);function os(e,t){return process.stdin.isTTY?new Promise(n=>{let r=Pn.createInterface({input:process.stdin,output:process.stdout});r.question(e,s=>{r.close();let o=s.trim().toLowerCase();if(o===""){n(t);return}n(o==="y"||o==="yes")})}):Promise.resolve(t)}function is(e){let t=I.homedir(),n=s=>s.replace(t,"~"),r=e.staleReason==="missing"?"path missing on disk":"path mismatch";return` \u2022 ${e.client.displayName} (${n(e.configPath)})
108
- ${r}: ${n(e.currentPath)}`}function Tn(e,t){if(e.length===0){console.log(`${t} \u2713 All MCP client configs are up to date.`);return}console.log(`${t} Found ${e.length} stale MCP config ${e.length===1?"entry":"entries"}:`);for(let n of e)console.log(is(n))}var T=new xn.Command,Ie=null,de=!1;function Z(){return Ie=new ee(()=>$.getSessionToken()),Ie}T.name("visa-cli").description("Visa CLI - AI payment orchestration").version(Be().version);T.hook("preAction",async()=>{await St()});T.command("setup").description("Register MCP server, authenticate, and generate attestation key").option("--check","Scan MCP client configs for stale visa-cli entries and exit without making changes").option("--yes","Accept all prompts (enable HUD etc) without asking \u2014 for CI/agent use").option("--no-hud","Skip the HUD install prompt (default: ask)").action(async e=>{try{if(e.check){let l=ue();Tn(l,"MCP config check:"),l.length>0&&(console.log("\nRun `visa-cli setup` (or `visa-cli install --repair`) to rewrite these entries."),process.exit(1));return}console.log("Step 1: Registering MCP server...");let t=ue(),n=new Map(t.map(l=>[l.client.id,l])),r=new Set;for(let l of M)if(ce(l)){let y=le(l),b=n.get(l.id),x=b?` \u2014 repaired stale ${b.staleReason} entry`:"";console.log(` \u2713 ${l.displayName} (${y.configPath.replace(I.homedir(),"~")})${x}`),b&&r.add(l.id)}let s=t.filter(l=>!r.has(l.client.id));for(let l of s)pt(l),console.log(` \u2713 ${l.client.displayName} (${l.configPath.replace(I.homedir(),"~")}) \u2014 repaired stale ${l.staleReason} entry`);let o=r.size+s.length;console.log(o===0?" \u2713 MCP config verified \u2014 nothing to repair.":` \u2713 Repaired ${o} stale MCP config ${o===1?"entry":"entries"}.`),console.log(`
109
- Step 2: Checking authentication...`);let i=await $.getSessionToken();if(i)try{await new ee(()=>Promise.resolve(i)).getStatus(),console.log(" Already authenticated.")}catch(l){let y=l instanceof Error?l.message:"";y.includes("session has expired")||y.includes("Not logged in")?(console.log(" Existing session expired \u2014 re-authenticating..."),await $.clearAll(),i=null):console.log(` Couldn't verify session (${y||"unknown error"}) \u2014 continuing with existing token.`)}if(i||(console.log(" No session found. Opening browser for GitHub login..."),i=await new Promise(async(l,y)=>{let b=Me.randomBytes(16).toString("hex"),x=`https://auth.visacli.sh/login?state=${b}`;await bt(x);let D=3e4,H=300*1e3,V=Date.now()+H;for(;Date.now()<V;)try{let F=await globalThis.fetch("https://auth.visacli.sh/v1/auth-status",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({state:b,timeout:D}),signal:AbortSignal.timeout(D+5e3)});if(!F.ok)continue;let k=await F.json();if(k.status==="pending")continue;if(k.status==="expired"){y(new Error("Session expired. Please run setup again."));return}if(k.status==="complete"&&k.sessionToken){console.log(` Signed in as ${k.user}.`),l(k.sessionToken);return}}catch{}y(new Error("Login timed out after 5 minutes. Please run setup again."))}),await $.saveSessionToken(i),console.log(" Session token saved.")),console.log(`
110
- Step 3: Setting up authentication...`),!se())console.log(" Not macOS \u2014 skipping biometric setup.");else{try{await ss("clang",["--version"])}catch{console.error(" Xcode Command Line Tools are required for payment authentication."),console.error(" Install them by running: xcode-select --install"),console.error(" Then re-run: visa-cli setup"),process.exit(1)}try{let l=await zt();console.log(" Attestation key generated."),await Z().registerAttestationKey(l),console.log(" Attestation key registered with server.")}catch(l){console.log(` Skipped: ${l.message}`)}}let a=fe.join(I.homedir(),".claude","settings.json"),c=kn.existsSync(fe.join(I.homedir(),".claude.json")),d=e.hud===!1;if(c&&!d){console.log(`
111
- Step 4: Enable the Visa spend HUD?`),console.log(" Pins your spend + card info below the Claude Code input, so"),console.log(" you can see your spend, card, and session usage in real time.");let l;if(e.yes?(l=!0,console.log(" (--yes) Enabling Visa HUD.")):process.stdin.isTTY?l=await os(" Enable Visa HUD? [Y/n] ",!0):(l=!1,console.log(" Non-interactive shell \u2014 skipping prompt. Enable with: visa-cli hud enable")),l){let y=qe(a),b=y.installed==="new"||y.installed==="already-visa"||y.installed==="other-hud-present"?" \u2713 ":" Skipped: ";console.log(`${b}${y.message}`);try{let x=Z(),D=await x.getStatus(),H={currentVersion:x.getClientVersion(),latestVersion:x.lastSignals?.updateAvailable?.version,updateMessage:x.lastSignals?.updateAvailable?.message,updateCheckDisabled:W()},V=ot(D,H);at(V),console.log(` Preview: ${V.split(`
112
- `)[0]}`)}catch{}}else(e.yes===!1||process.stdin.isTTY)&&console.log(" Skipped. Enable any time with: visa-cli hud enable")}let u="\x1B[1m",f="\x1B[0m";console.log(`
105
+ `)):e}function le(e,t="global"){let n=t==="project"?p.join(process.cwd(),".mcp.json"):Ie(e),r=p.dirname(n);m.existsSync(r)||m.mkdirSync(r,{recursive:!0});let s=ut(e,t),o=Cn();if(s==="toml"){let i=m.existsSync(n)?m.readFileSync(n,"utf-8"):"",a=ts(i,"visa-cli",o);m.writeFileSync(n,a)}else{let i={};if(m.existsSync(n))try{i=JSON.parse(m.readFileSync(n,"utf-8"))}catch{i={}}i[e.configKey]=i[e.configKey]||{},i[e.configKey]["visa-cli"]=e.buildEntry?e.buildEntry(o):o,m.writeFileSync(n,JSON.stringify(i,null,2)+`
106
+ `)}return{installed:!0,configPath:n,message:e.postInstallHint}}function pt(e,t="global"){let n=t==="project"?p.join(process.cwd(),".mcp.json"):Ie(e);if(!m.existsSync(n))return{removed:!1,configPath:n};if(ut(e,t)==="toml"){let i=m.readFileSync(n,"utf-8");return ft(i,"visa-cli")?(m.writeFileSync(n,ns(i,"visa-cli")),{removed:!0,configPath:n}):{removed:!1,configPath:n}}let s;try{s=JSON.parse(m.readFileSync(n,"utf-8"))}catch{return{removed:!1,configPath:n}}let o=s[e.configKey];return!o||!o["visa-cli"]?{removed:!1,configPath:n}:(delete o["visa-cli"],m.writeFileSync(n,JSON.stringify(s,null,2)+`
107
+ `),{removed:!0,configPath:n})}function xn(e,t="global"){let n=t==="project"?p.join(process.cwd(),".mcp.json"):Ie(e);if(!m.existsSync(n))return!1;if(ut(e,t)==="toml")try{let s=m.readFileSync(n,"utf-8");return!!ft(s,"visa-cli")}catch{return!1}try{return!!JSON.parse(m.readFileSync(n,"utf-8"))?.[e.configKey]?.["visa-cli"]}catch{return!1}}function rs(e){if(!e||typeof e!="object")return;let t=e;if(t.command!=="node"||!Array.isArray(t.args)||t.args.length===0)return;let n=t.args[t.args.length-1];if(!(typeof n!="string"||n.length===0))return n}function ss(e,t){if(e===t)return!0;let n=p.resolve(e),r=p.resolve(t);if(n===r)return!0;try{let s=m.realpathSync(n),o=m.realpathSync(r);return s===o}catch{return!1}}function ue(){let e=Cn(),t=e.args[e.args.length-1],n=[];for(let r of D){let s=Ie(r);if(!m.existsSync(s))continue;let o=r.configFormat??"json",i;if(o==="toml")try{let d=m.readFileSync(s,"utf-8");i=ft(d,"visa-cli")}catch{continue}else{let d;try{d=JSON.parse(m.readFileSync(s,"utf-8"))}catch{continue}i=d?.[r.configKey]?.["visa-cli"]}if(!i)continue;let a=rs(i);if(!a||ss(a,t))continue;let c=m.existsSync(a)?"mismatch":"missing";n.push({client:r,configPath:s,currentPath:a,expectedPath:t,staleReason:c})}return n}function mt(e){return{configPath:le(e.client,"global").configPath}}var os=(0,Rn.promisify)(Tn.execFile);function is(e,t){return process.stdin.isTTY?new Promise(n=>{let r=En.createInterface({input:process.stdin,output:process.stdout});r.question(e,s=>{r.close();let o=s.trim().toLowerCase();if(o===""){n(t);return}n(o==="y"||o==="yes")})}):Promise.resolve(t)}function as(e){let t=N.homedir(),n=s=>s.replace(t,"~"),r=e.staleReason==="missing"?"path missing on disk":"path mismatch";return` \u2022 ${e.client.displayName} (${n(e.configPath)})
108
+ ${r}: ${n(e.currentPath)}`}function An(e,t){if(e.length===0){console.log(`${t} \u2713 All MCP client configs are up to date.`);return}console.log(`${t} Found ${e.length} stale MCP config ${e.length===1?"entry":"entries"}:`);for(let n of e)console.log(as(n))}var x=new kn.Command,Ne=null,de=!1;function j(){return Ne=new te(()=>$.getSessionToken()),Ne}x.name("visa-cli").description("Visa CLI - AI payment orchestration").version(Be().version);x.hook("preAction",async()=>{await vt()});x.command("setup").description("Register MCP server, authenticate, and generate attestation key").option("--check","Scan MCP client configs for stale visa-cli entries and exit without making changes").option("--yes","Accept all prompts (enable HUD etc) without asking \u2014 for CI/agent use").option("--no-hud","Skip the HUD install prompt (default: ask)").action(async e=>{try{if(e.check){let u=ue();An(u,"MCP config check:"),u.length>0&&(console.log("\nRun `visa-cli setup` (or `visa-cli install --repair`) to rewrite these entries."),process.exit(1));return}console.log("Step 1: Registering MCP server...");let t=ue(),n=new Map(t.map(u=>[u.client.id,u])),r=new Set;for(let u of D)if(ce(u)){let y=le(u),v=n.get(u.id),k=v?` \u2014 repaired stale ${v.staleReason} entry`:"";console.log(` \u2713 ${u.displayName} (${y.configPath.replace(N.homedir(),"~")})${k}`),v&&r.add(u.id)}let s=t.filter(u=>!r.has(u.client.id));for(let u of s)mt(u),console.log(` \u2713 ${u.client.displayName} (${u.configPath.replace(N.homedir(),"~")}) \u2014 repaired stale ${u.staleReason} entry`);let o=r.size+s.length;console.log(o===0?" \u2713 MCP config verified \u2014 nothing to repair.":` \u2713 Repaired ${o} stale MCP config ${o===1?"entry":"entries"}.`),console.log(`
109
+ Step 2: Checking authentication...`);let i=await $.getSessionToken();if(i)try{await new te(()=>Promise.resolve(i)).getStatus(),console.log(" Already authenticated.")}catch(u){let y=u instanceof Error?u.message:"";y.includes("session has expired")||y.includes("Not logged in")?(console.log(" Existing session expired \u2014 re-authenticating..."),await $.clearAll(),i=null):console.log(` Couldn't verify session (${y||"unknown error"}) \u2014 continuing with existing token.`)}if(i||(console.log(" No session found. Opening browser for GitHub login..."),i=await new Promise(async(u,y)=>{let v=De.randomBytes(16).toString("hex"),k=`https://auth.visacli.sh/login?state=${v}`;await _t(k);let U=3e4,H=300*1e3,B=Date.now()+H;for(;Date.now()<B;)try{let K=await globalThis.fetch("https://auth.visacli.sh/v1/auth-status",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({state:v,timeout:U}),signal:AbortSignal.timeout(U+5e3)});if(!K.ok)continue;let P=await K.json();if(P.status==="pending")continue;if(P.status==="expired"){y(new Error("Session expired. Please run setup again."));return}if(P.status==="complete"&&P.sessionToken){console.log(` Signed in as ${P.user}.`),u(P.sessionToken);return}}catch{}y(new Error("Login timed out after 5 minutes. Please run setup again."))}),await $.saveSessionToken(i),console.log(" Session token saved.")),console.log(`
110
+ Step 3: Setting up authentication...`),!F())console.log(" Not macOS \u2014 skipping biometric setup.");else{try{await os("clang",["--version"])}catch{console.error(" Xcode Command Line Tools are required for payment authentication."),console.error(" Install them by running: xcode-select --install"),console.error(" Then re-run: visa-cli setup"),process.exit(1)}try{let u=await Xt();console.log(" Attestation key generated."),await j().registerAttestationKey(u),console.log(" Attestation key registered with server.")}catch(u){console.log(` Skipped: ${u.message}`)}}let a=fe.join(N.homedir(),".claude","settings.json"),c=Pn.existsSync(fe.join(N.homedir(),".claude.json")),d=e.hud===!1;if(c&&!d){console.log(`
111
+ Step 4: Enable the Visa spend HUD?`),console.log(" Pins your spend + card info below the Claude Code input, so"),console.log(" you can see your spend, card, and session usage in real time.");let u;if(e.yes?(u=!0,console.log(" (--yes) Enabling Visa HUD.")):process.stdin.isTTY?u=await is(" Enable Visa HUD? [Y/n] ",!0):(u=!1,console.log(" Non-interactive shell \u2014 skipping prompt. Enable with: visa-cli hud enable")),u){let y=qe(a),v=y.installed==="new"||y.installed==="already-visa"||y.installed==="other-hud-present"?" \u2713 ":" Skipped: ";console.log(`${v}${y.message}`);try{let k=j(),U=await k.getStatus(),H={currentVersion:k.getClientVersion(),latestVersion:k.lastSignals?.updateAvailable?.version,updateMessage:k.lastSignals?.updateAvailable?.message,updateCheckDisabled:z()},B=it(U,H);ct(B),console.log(` Preview: ${B.split(`
112
+ `)[0]}`)}catch{}}else(e.yes===!1||process.stdin.isTTY)&&console.log(" Skipped. Enable any time with: visa-cli hud enable")}let l="\x1B[1m",f="\x1B[0m";console.log(`
113
113
  \u2588\u2588\u2557 \u2588\u2588\u2557\u2588\u2588\u2557\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557 \u2588\u2588\u2588\u2588\u2588\u2557
114
114
  \u2588\u2588\u2551 \u2588\u2588\u2551\u2588\u2588\u2551\u2588\u2588\u2554\u2550\u2550\u2550\u2550\u255D\u2588\u2588\u2554\u2550\u2550\u2588\u2588\u2557
115
115
  \u2588\u2588\u2551 \u2588\u2588\u2551\u2588\u2588\u2551\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2551
@@ -117,30 +117,30 @@ Step 4: Enable the Visa spend HUD?`),console.log(" Pins your spend + card info
117
117
  \u255A\u2588\u2588\u2588\u2588\u2554\u255D \u2588\u2588\u2551\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2551\u2588\u2588\u2551 \u2588\u2588\u2551
118
118
  \u255A\u2550\u2550\u2550\u255D \u255A\u2550\u255D\u255A\u2550\u2550\u2550\u2550\u2550\u2550\u255D\u255A\u2550\u255D \u255A\u2550\u255D \u2588 CLI
119
119
 
120
- ${u}Setup complete.${f} Restart Claude Code or run /mcp to connect.
120
+ ${l}Setup complete.${f} Restart Claude Code or run /mcp to connect.
121
121
 
122
- ${u}Try it out:${f}
122
+ ${l}Try it out:${f}
123
123
  \u2022 Ask Claude: "Generate an image of a neon cityscape"
124
124
  \u2022 Ask Claude: "What's the price of ETH on Base?"
125
125
  \u2022 Or run: visa-cli pay <merchant-url>
126
126
 
127
- ${u}Verify:${f} visa-cli status
128
- ${u}HUD:${f} Restart Claude Code to see your spend pinned below the input
129
- ${u}Docs:${f} https://visacli.sh
130
- `)}catch(t){console.error("Error:",t.message),process.exit(1)}});T.command("install [client]").description("Register MCP server with an AI client (claude, cursor, windsurf, cline, zed, ...)").option("--all","Install for all detected clients").option("--list","Show supported clients and install status").option("--check","Scan MCP client configs for stale visa-cli entries and exit without making changes").option("--repair","Repair stale MCP client configs without re-running the full setup flow").option("--scope <scope>","Install scope: global or project","global").action(async(e,t)=>{try{if(t.check){let o=ue();Tn(o,"MCP config check:"),o.length>0&&process.exit(1);return}if(t.repair){let o=ue();if(o.length===0){console.log("\u2713 MCP config verified \u2014 nothing to repair.");return}for(let i of o)pt(i),console.log(` \u2713 ${i.client.displayName} (${i.configPath.replace(I.homedir(),"~")}) \u2014 repaired stale ${i.staleReason} entry`);console.log(`
127
+ ${l}Verify:${f} visa-cli status
128
+ ${l}HUD:${f} Restart Claude Code to see your spend pinned below the input
129
+ ${l}Docs:${f} https://visacli.sh
130
+ `)}catch(t){console.error("Error:",t.message),process.exit(1)}});x.command("install [client]").description("Register MCP server with an AI client (claude, cursor, windsurf, cline, zed, ...)").option("--all","Install for all detected clients").option("--list","Show supported clients and install status").option("--check","Scan MCP client configs for stale visa-cli entries and exit without making changes").option("--repair","Repair stale MCP client configs without re-running the full setup flow").option("--scope <scope>","Install scope: global or project","global").action(async(e,t)=>{try{if(t.check){let o=ue();An(o,"MCP config check:"),o.length>0&&process.exit(1);return}if(t.repair){let o=ue();if(o.length===0){console.log("\u2713 MCP config verified \u2014 nothing to repair.");return}for(let i of o)mt(i),console.log(` \u2713 ${i.client.displayName} (${i.configPath.replace(N.homedir(),"~")}) \u2014 repaired stale ${i.staleReason} entry`);console.log(`
131
131
  Repaired ${o.length} stale MCP config ${o.length===1?"entry":"entries"}.`);return}if(t.list){console.log(`
132
132
  \x1B[1mSupported MCP Clients\x1B[0m
133
- `),console.log(` ${"Client".padEnd(18)} ${"Detected".padEnd(10)} ${"Installed".padEnd(11)} Config Path`),console.log(` ${"\u2500".repeat(18)} ${"\u2500".repeat(10)} ${"\u2500".repeat(11)} ${"\u2500".repeat(40)}`);for(let a of M){let c=ce(a),d=Cn(a),u=c?"Yes":"No",f=d?"Yes":"No",l=a.globalConfigPath.replace(I.homedir(),"~");console.log(` ${a.displayName.padEnd(18)} ${u.padEnd(10)} ${f.padEnd(11)} ${l}`)}console.log("");return}let n=t.scope==="project"?"project":"global";if(t.all){let o=[],i=[];for(let a of M){if(!ce(a)){i.push(a.displayName);continue}le(a,n),o.push(a.displayName)}o.length>0&&console.log(`Installed for: ${o.join(", ")}.`),i.length>0&&console.log(`Skipped: ${i.map(a=>`${a} (not detected)`).join(", ")}.`),o.length===0&&i.length===0&&console.log("No supported clients found.");return}e||(console.error("Usage: visa-cli install <client>"),console.error(" visa-cli install --all"),console.error(" visa-cli install --list"),console.error(`
134
- Supported clients: ${M.map(o=>o.id).join(", ")}`),process.exit(1));let r=ct(e);r||(console.error(`Unknown client: ${e}`),console.error(`Supported clients: ${M.map(o=>o.id).join(", ")}`),process.exit(1)),n==="global"&&!ce(r)&&(console.error(`${r.displayName} not detected on this machine.`),console.error(`Expected: ${r.detectPaths.join(", ")}`),process.exit(1));let s=le(r,n);console.log(`Registered visa-cli MCP server in ${s.configPath}`),console.log(s.message)}catch(n){console.error("Error:",n.message),process.exit(1)}});T.command("uninstall [client]").description("Remove MCP server from an AI client").option("--all","Remove from all clients").option("--scope <scope>","Uninstall scope: global or project","global").action(async(e,t)=>{try{let n=t.scope==="project"?"project":"global";if(t.all){let o=[];for(let i of M)ft(i,n).removed&&o.push(i.displayName);o.length>0?console.log(`Removed visa-cli from: ${o.join(", ")}.`):console.log("visa-cli was not installed in any client.");return}e||(console.error("Usage: visa-cli uninstall <client>"),console.error(" visa-cli uninstall --all"),console.error(`
135
- Supported clients: ${M.map(o=>o.id).join(", ")}`),process.exit(1));let r=ct(e);r||(console.error(`Unknown client: ${e}`),console.error(`Supported clients: ${M.map(o=>o.id).join(", ")}`),process.exit(1));let s=ft(r,n);s.removed?console.log(`Removed visa-cli from ${s.configPath}`):console.log(`visa-cli was not installed for ${r.displayName}.`)}catch(n){console.error("Error:",n.message),process.exit(1)}});T.command("pay <url>").description("Pay a merchant URL (amount auto-detected from HTTP 402 response)").option("-m, --method <method>","HTTP method (GET or POST)","GET").option("-b, --body <json>","JSON request body for POST endpoints").action(async(e,t)=>{try{mn(e);let n=gn(t.method),r=hn(t.body),s=new ee(()=>$.getSessionToken());console.log(`Checking payment for ${e}...`);let o=yn(await s.paymentPreview({url:e}));console.log(` Merchant: ${o.merchantName}`),console.log(` Amount: $${o.amount.toFixed(2)} ${o.currency}`),console.log(` Rail: auto-detected
136
- `);let i;if(se())try{let{nonce:c}=await s.getAttestationChallenge(),d=Buffer.from(JSON.stringify({nonce:c,amount:o.amount,merchant:o.merchantName,context:e})).toString("base64");i={signature:await Yt(d,`pay $${o.amount.toFixed(2)} to ${o.merchantName}`),nonce:c,amount:o.amount,merchant:o.merchantName}}catch(c){console.error(`Touch ID confirmation failed: ${c?.message||"user cancelled or biometric error"}`),process.exit(1)}else console.warn("Warning: Touch ID unavailable on this system \u2014 payment will proceed without biometric attestation.");let a=await s.pay({url:e,method:n,body:r,attestation:i,idempotencyKey:Me.randomUUID()});if(a.success){if(console.log(`Payment complete: $${(a.amount??o.amount).toFixed(2)} \u2192 ${a.merchantName??o.merchantName}`),a.receipt?.urls?.length){console.log(`
137
- Result URLs:`);for(let c of a.receipt.urls)console.log(` ${c}`)}}else console.error(`Payment failed: ${a.message||"Unknown error"}`),process.exit(1)}catch(n){n instanceof R?console.error(`Error: ${n.message}`):console.error("Error:",n.message),process.exit(1)}});T.command("status").description("Check enrollment, cards, wallet, and spending controls").action(async()=>{de=!1;try{let e=Z(),t=await e.getStatus(),n={currentVersion:e.getClientVersion(),latestVersion:e.lastSignals.updateAvailable?.version,updateMessage:e.lastSignals.updateAvailable?.message,updateCheckDisabled:W()},r=await e.getTransactions().catch(s=>{if(process.env.VISA_CLI_DEBUG){let o=s instanceof Error?s.message:String(s);process.stderr.write(`[visa-cli] getTransactions failed (HUD will omit): ${o}
138
- `)}return{transactions:[]}});process.stdout.write(en(t,Array.isArray(r?.transactions)?r.transactions:[],se(),n)),de=!0}catch(e){de=!1,console.error("Error:",e.message),process.exit(1)}});T.command("reset").description("Log out and clear all credentials").action(async()=>{try{console.log(`Resetting Visa CLI...
139
- `);try{await Z().logout(),console.log(" Server session invalidated.")}catch{console.log(" Server logout skipped (no active session).")}if(await $.clearAll(),console.log(" Keychain credentials cleared."),se())try{await Xt(),console.log(" Secure Enclave key deleted.")}catch{console.log(" No Secure Enclave key to delete.")}console.log(`
140
- Reset complete.`)}catch(e){console.error("Error:",e.message),process.exit(1)}});T.command("feedback").description("Submit feedback about Visa CLI").argument("[message]","Your feedback message").action(async e=>{(!e||e.trim().length===0)&&(console.log('Usage: visa-cli feedback "your message"'),process.exit(1));try{await $.getSessionToken()||(console.error("Not logged in. Run visa-cli setup first."),process.exit(1)),await Z().feedback(e.trim()),console.log("Feedback submitted. Thanks!")}catch(t){console.error("Error:",t.message),process.exit(1)}});var Q=T.command("shell-hud").description("Manage the persistent Visa HUD shown in your shell prompt");function An(){let e=an();e.installed||(console.error(e.message),process.exit(1)),console.log(e.message)}function Ln(){let e=cn();e.removed||(console.error(e.message),process.exit(1)),console.log(e.message)}Q.command("install").description("Install the persistent shell HUD into your zsh or bash rc file").action(An);Q.command("enable").description("Enable the persistent shell HUD").action(An);Q.command("uninstall").description("Remove the persistent shell HUD from your shell rc file").action(Ln);Q.command("disable").description("Disable the persistent shell HUD").action(Ln);Q.command("segment").description("Print the cached shell HUD segment").action(()=>{process.stdout.write(`${it()}
141
- `)});Q.command("doctor").description("Diagnose shell HUD installation and connectivity").action(async()=>{let{existsSync:e,readFileSync:t}=await import("fs"),n=!0,r=(f,l,y)=>{console.log(` ${l?"\u2713":"\u2717"} ${f}: ${y}`),l||(n=!1)};console.log(`Shell HUD Doctor
142
- `);let s=Ae();if(r("Shell detected",!!s,s??"none (zsh, bash, or PowerShell required)"),s){let f=Le(s),l=e(f);if(r("RC file exists",l,f.replace(I.homedir(),"~")),l){let b=t(f,"utf-8").includes("visa-cli shell hud v2");r("HUD block installed",b,b?"found in rc file":"missing \u2014 run: visa-cli shell-hud install")}}let o=ae(),i=e(o);if(r("Cache file",i,i?o.replace(I.homedir(),"~"):"missing \u2014 HUD has not refreshed yet"),i)try{let f=JSON.parse(t(o,"utf-8")),l=Date.now()-(f.renderedAt??0),y=Math.round(l/1e3),b=y<=30;console.log(` ${b?"\u2713":"\u26A0"} Cache freshness: ${y}s old${b?"":" (stale \u2014 will refresh on next prompt)"}`)}catch{r("Cache readable",!1,"corrupt JSON")}let a=Te(),c=e(a),d="missing";if(c)try{d=t(a,"utf-8").trim().slice(0,80)}catch{d="unreadable"}r("Line file",c,d);let u=!1;try{u=!!await $.getSessionToken()}catch{}if(r("Auth token",u,u?"found in keychain":"missing \u2014 run: visa-cli setup"),u)try{await Z().getStatus(),r("API connectivity",!0,"GET /v1/status OK")}catch(f){let l=f instanceof Error?f.message:"unknown error";r("API connectivity",!1,l)}console.log(n?`
133
+ `),console.log(` ${"Client".padEnd(18)} ${"Detected".padEnd(10)} ${"Installed".padEnd(11)} Config Path`),console.log(` ${"\u2500".repeat(18)} ${"\u2500".repeat(10)} ${"\u2500".repeat(11)} ${"\u2500".repeat(40)}`);for(let a of D){let c=ce(a),d=xn(a),l=c?"Yes":"No",f=d?"Yes":"No",u=a.globalConfigPath.replace(N.homedir(),"~");console.log(` ${a.displayName.padEnd(18)} ${l.padEnd(10)} ${f.padEnd(11)} ${u}`)}console.log("");return}let n=t.scope==="project"?"project":"global";if(t.all){let o=[],i=[];for(let a of D){if(!ce(a)){i.push(a.displayName);continue}le(a,n),o.push(a.displayName)}o.length>0&&console.log(`Installed for: ${o.join(", ")}.`),i.length>0&&console.log(`Skipped: ${i.map(a=>`${a} (not detected)`).join(", ")}.`),o.length===0&&i.length===0&&console.log("No supported clients found.");return}e||(console.error("Usage: visa-cli install <client>"),console.error(" visa-cli install --all"),console.error(" visa-cli install --list"),console.error(`
134
+ Supported clients: ${D.map(o=>o.id).join(", ")}`),process.exit(1));let r=lt(e);r||(console.error(`Unknown client: ${e}`),console.error(`Supported clients: ${D.map(o=>o.id).join(", ")}`),process.exit(1)),n==="global"&&!ce(r)&&(console.error(`${r.displayName} not detected on this machine.`),console.error(`Expected: ${r.detectPaths.join(", ")}`),process.exit(1));let s=le(r,n);console.log(`Registered visa-cli MCP server in ${s.configPath}`),console.log(s.message)}catch(n){console.error("Error:",n.message),process.exit(1)}});x.command("uninstall [client]").description("Remove MCP server from an AI client").option("--all","Remove from all clients").option("--scope <scope>","Uninstall scope: global or project","global").action(async(e,t)=>{try{let n=t.scope==="project"?"project":"global";if(t.all){let o=[];for(let i of D)pt(i,n).removed&&o.push(i.displayName);o.length>0?console.log(`Removed visa-cli from: ${o.join(", ")}.`):console.log("visa-cli was not installed in any client.");return}e||(console.error("Usage: visa-cli uninstall <client>"),console.error(" visa-cli uninstall --all"),console.error(`
135
+ Supported clients: ${D.map(o=>o.id).join(", ")}`),process.exit(1));let r=lt(e);r||(console.error(`Unknown client: ${e}`),console.error(`Supported clients: ${D.map(o=>o.id).join(", ")}`),process.exit(1));let s=pt(r,n);s.removed?console.log(`Removed visa-cli from ${s.configPath}`):console.log(`visa-cli was not installed for ${r.displayName}.`)}catch(n){console.error("Error:",n.message),process.exit(1)}});x.command("pay <url>").description("Pay a merchant URL (amount auto-detected from HTTP 402 response)").option("-m, --method <method>","HTTP method (GET or POST)","GET").option("-b, --body <json>","JSON request body for POST endpoints").action(async(e,t)=>{try{gn(e);let n=hn(t.method),r=yn(t.body),s=new te(()=>$.getSessionToken());console.log(`Checking payment for ${e}...`);let o=Sn(await s.paymentPreview({url:e}));console.log(` Merchant: ${o.merchantName}`),console.log(` Amount: $${o.amount.toFixed(2)} ${o.currency}`),console.log(` Rail: auto-detected
136
+ `);let a=(await s.getStatus()).attestationRequired!==!1,c;if(a&&F())try{let{nonce:l}=await s.getAttestationChallenge(),f=Buffer.from(JSON.stringify({nonce:l,amount:o.amount,merchant:o.merchantName,context:e})).toString("base64");c={signature:await et(f,`pay $${o.amount.toFixed(2)} to ${o.merchantName}`),nonce:l,amount:o.amount,merchant:o.merchantName}}catch(l){console.error(`Touch ID confirmation failed: ${l?.message||"user cancelled or biometric error"}`),process.exit(1)}else a&&!F()&&console.warn("Warning: Touch ID unavailable on this system \u2014 payment will proceed without biometric attestation.");let d=await s.pay({url:e,method:n,body:r,attestation:c,idempotencyKey:De.randomUUID()});if(d.success){if(console.log(`Payment complete: $${(d.amount??o.amount).toFixed(2)} \u2192 ${d.merchantName??o.merchantName}`),d.receipt?.urls?.length){console.log(`
137
+ Result URLs:`);for(let l of d.receipt.urls)console.log(` ${l}`)}}else console.error(`Payment failed: ${d.message||"Unknown error"}`),process.exit(1)}catch(n){n instanceof R?console.error(`Error: ${n.message}`):console.error("Error:",n.message),process.exit(1)}});x.command("status").description("Check enrollment, cards, wallet, and spending controls").action(async()=>{de=!1;try{let e=j(),t=await e.getStatus(),n={currentVersion:e.getClientVersion(),latestVersion:e.lastSignals.updateAvailable?.version,updateMessage:e.lastSignals.updateAvailable?.message,updateCheckDisabled:z()},r=await e.getTransactions().catch(s=>{if(process.env.VISA_CLI_DEBUG){let o=s instanceof Error?s.message:String(s);process.stderr.write(`[visa-cli] getTransactions failed (HUD will omit): ${o}
138
+ `)}return{transactions:[]}});process.stdout.write(tn(t,Array.isArray(r?.transactions)?r.transactions:[],F(),n)),de=!0}catch(e){de=!1,console.error("Error:",e.message),process.exit(1)}});x.command("reset").description("Log out and clear all credentials").action(async()=>{try{console.log(`Resetting Visa CLI...
139
+ `);try{await j().logout(),console.log(" Server session invalidated.")}catch{console.log(" Server logout skipped (no active session).")}if(await $.clearAll(),console.log(" Keychain credentials cleared."),F())try{await Zt(),console.log(" Secure Enclave key deleted.")}catch{console.log(" No Secure Enclave key to delete.")}console.log(`
140
+ Reset complete.`)}catch(e){console.error("Error:",e.message),process.exit(1)}});x.command("feedback").description("Submit feedback about Visa CLI").argument("[message]","Your feedback message").action(async e=>{(!e||e.trim().length===0)&&(console.log('Usage: visa-cli feedback "your message"'),process.exit(1));try{await $.getSessionToken()||(console.error("Not logged in. Run visa-cli setup first."),process.exit(1)),await j().feedback(e.trim()),console.log("Feedback submitted. Thanks!")}catch(t){console.error("Error:",t.message),process.exit(1)}});var gt=x.command("biometric").description("Manage Touch ID / biometric attestation enforcement");gt.command("status").description("Show current biometric enforcement state").action(async()=>{try{await $.getSessionToken()||(console.error("Not logged in. Run visa-cli setup first."),process.exit(1));let n=await j().getStatus(),r=n.attestationRequired!==!1,s=!!n.hasAttestationKey,o=F();console.log(`Server policy: Touch ID ${r?"REQUIRED":"NOT required"}`),console.log(`Attestation key registered: ${s?"yes":"no"}`),console.log(`Touch ID available on this device: ${o?"yes":"no"}`)}catch(e){console.error("Error:",e.message),process.exit(1)}});gt.command("on").description("Require Touch ID for payments (security upgrade \u2014 no Touch ID needed)").action(async()=>{try{await $.getSessionToken()||(console.error("Not logged in. Run visa-cli setup first."),process.exit(1));let t=j(),n=await t.setBiometricPreference({required:!0});n.success||(console.error(`Failed: ${n.error||"unknown error"}`),process.exit(1)),console.log("Touch ID is now REQUIRED for payments."),(await t.getStatus()).hasAttestationKey||console.warn("Note: no attestation key is registered yet. Run `visa-cli setup` to enroll Touch ID.")}catch(e){console.error("Error:",e.message),process.exit(1)}});gt.command("off").description("Disable Touch ID requirement (security downgrade \u2014 one Touch ID confirmation required)").action(async()=>{try{await $.getSessionToken()||(console.error("Not logged in. Run visa-cli setup first."),process.exit(1));let t=j(),n=await t.getStatus();if(n.attestationRequired===!1){console.log("Touch ID is already disabled.");return}let r;if(n.hasAttestationKey&&F())try{let{nonce:o}=await t.getAttestationChallenge(),i=0,a="",c=Buffer.from(JSON.stringify({nonce:o,amount:i,merchant:a,context:"biometric-preference"})).toString("base64");r={signature:await et(c,"disable Touch ID requirement"),nonce:o,amount:i,merchant:a}}catch(o){console.error(`Touch ID confirmation failed: ${o?.message||"cancelled"}`),process.exit(1)}else n.hasAttestationKey&&!F()&&(console.error("Touch ID is unavailable on this device but the server has a registered key."),console.error("Disable Touch ID from a device that can sign, or contact support."),process.exit(1));let s=await t.setBiometricPreference({required:!1,attestation:r});s.success||(console.error(`Failed: ${s.error||"unknown error"}`),process.exit(1)),console.log("Touch ID is no longer required for payments.")}catch(e){console.error("Error:",e.message),process.exit(1)}});var ee=x.command("shell-hud").description("Manage the persistent Visa HUD shown in your shell prompt");function Ln(){let e=cn();e.installed||(console.error(e.message),process.exit(1)),console.log(e.message)}function In(){let e=ln();e.removed||(console.error(e.message),process.exit(1)),console.log(e.message)}ee.command("install").description("Install the persistent shell HUD into your zsh or bash rc file").action(Ln);ee.command("enable").description("Enable the persistent shell HUD").action(Ln);ee.command("uninstall").description("Remove the persistent shell HUD from your shell rc file").action(In);ee.command("disable").description("Disable the persistent shell HUD").action(In);ee.command("segment").description("Print the cached shell HUD segment").action(()=>{process.stdout.write(`${at()}
141
+ `)});ee.command("doctor").description("Diagnose shell HUD installation and connectivity").action(async()=>{let{existsSync:e,readFileSync:t}=await import("fs"),n=!0,r=(f,u,y)=>{console.log(` ${u?"\u2713":"\u2717"} ${f}: ${y}`),u||(n=!1)};console.log(`Shell HUD Doctor
142
+ `);let s=Ae();if(r("Shell detected",!!s,s??"none (zsh, bash, or PowerShell required)"),s){let f=Le(s),u=e(f);if(r("RC file exists",u,f.replace(N.homedir(),"~")),u){let v=t(f,"utf-8").includes("visa-cli shell hud v2");r("HUD block installed",v,v?"found in rc file":"missing \u2014 run: visa-cli shell-hud install")}}let o=ae(),i=e(o);if(r("Cache file",i,i?o.replace(N.homedir(),"~"):"missing \u2014 HUD has not refreshed yet"),i)try{let f=JSON.parse(t(o,"utf-8")),u=Date.now()-(f.renderedAt??0),y=Math.round(u/1e3),v=y<=30;console.log(` ${v?"\u2713":"\u26A0"} Cache freshness: ${y}s old${v?"":" (stale \u2014 will refresh on next prompt)"}`)}catch{r("Cache readable",!1,"corrupt JSON")}let a=Re(),c=e(a),d="missing";if(c)try{d=t(a,"utf-8").trim().slice(0,80)}catch{d="unreadable"}r("Line file",c,d);let l=!1;try{l=!!await $.getSessionToken()}catch{}if(r("Auth token",l,l?"found in keychain":"missing \u2014 run: visa-cli setup"),l)try{await j().getStatus(),r("API connectivity",!0,"GET /v1/status OK")}catch(f){let u=f instanceof Error?f.message:"unknown error";r("API connectivity",!1,u)}console.log(n?`
143
143
  All checks passed.`:`
144
- Some checks failed \u2014 see above.`),n||process.exit(1)});Q.command("refresh").description("Refresh the shell HUD cache (no-op if cache is fresh unless --force)").option("--force","Bypass the cache freshness gate and always refresh").action(async e=>{if(!(!e.force&&ln()))try{let t=Z(),n=await t.getStatus(),r={currentVersion:t.getClientVersion(),latestVersion:t.lastSignals.updateAvailable?.version,updateMessage:t.lastSignals.updateAvailable?.message,updateCheckDisabled:W()},s=ot(n,r);at(s)}catch{}finally{ie()}});T.command("statusline").description("Output the multi-line Visa HUD for Claude Code statusLine integration").action(async()=>{let e=await At(),n=it().split(`
145
- `)[0],r=await Nt(n,e);process.stdout.write(`${r}
146
- `)});var Nn=T.command("hud").description("Manage the Visa HUD pinned below Claude Code input");Nn.command("enable").description("Register Visa HUD as the Claude Code statusLine").action(()=>{let e=fe.join(I.homedir(),".claude","settings.json"),t=qe(e);console.log(t.message),(t.installed==="error"||t.installed==="malformed-json")&&process.exit(1)});Nn.command("disable").description("Remove Visa HUD from Claude Code statusLine (leaves other tools untouched)").action(()=>{let e=fe.join(I.homedir(),".claude","settings.json"),t=kt(e);console.log(t.message),t.removed||process.exit(1)});T.hook("postAction",()=>{if(de){de=!1;return}Ie&&Zt(Ie.lastSignals)});T.parse();
144
+ Some checks failed \u2014 see above.`),n||process.exit(1)});ee.command("refresh").description("Refresh the shell HUD cache (no-op if cache is fresh unless --force)").option("--force","Bypass the cache freshness gate and always refresh").action(async e=>{if(!(!e.force&&un()))try{let t=j(),n=await t.getStatus(),r={currentVersion:t.getClientVersion(),latestVersion:t.lastSignals.updateAvailable?.version,updateMessage:t.lastSignals.updateAvailable?.message,updateCheckDisabled:z()},s=it(n,r);ct(s)}catch{}finally{ie()}});x.command("statusline").description("Output the multi-line Visa HUD for Claude Code statusLine integration").action(async()=>{let e=await It(),n=at().split(`
145
+ `)[0],r=await Dt(n,e);process.stdout.write(`${r}
146
+ `)});var Nn=x.command("hud").description("Manage the Visa HUD pinned below Claude Code input");Nn.command("enable").description("Register Visa HUD as the Claude Code statusLine").action(()=>{let e=fe.join(N.homedir(),".claude","settings.json"),t=qe(e);console.log(t.message),(t.installed==="error"||t.installed==="malformed-json")&&process.exit(1)});Nn.command("disable").description("Remove Visa HUD from Claude Code statusLine (leaves other tools untouched)").action(()=>{let e=fe.join(N.homedir(),".claude","settings.json"),t=Et(e);console.log(t.message),t.removed||process.exit(1)});x.hook("postAction",()=>{if(de){de=!1;return}Ne&&Qt(Ne.lastSignals)});x.parse();