@visa/cli 2.1.0-rc.5 → 2.1.0-rc.7

package/install.ps1

@@ -168,16 +168,21 @@ if ($npmExitCode -ne 0) {
 # Verify
 $cliCommandNames = Get-InstalledCliCommands
 $verifiedCommand = $null
+$verifiedCommandPath = $null
 $visaVersion = $null
 
 foreach ($commandName in $cliCommandNames) {
-    if (-not (Get-Command $commandName -ErrorAction SilentlyContinue)) {
+    $commandInfo = Get-Command $commandName -ErrorAction SilentlyContinue
+    if (-not $commandInfo) {
         continue
     }
 
-    $versionOutput = (& $commandName --version 2>$null | Select-Object -First 1)
+    # Capture the resolved executable path so the setup hand-off below runs
+    # exactly the binary verified here, not a fresh PATH lookup.
+    $versionOutput = (& $commandInfo.Source --version 2>$null | Select-Object -First 1)
     if ($LASTEXITCODE -eq 0 -and $versionOutput) {
         $verifiedCommand = $commandName
+        $verifiedCommandPath = $commandInfo.Source
         $visaVersion = $versionOutput.Trim()
         break
     }
@@ -186,8 +191,41 @@ foreach ($commandName in $cliCommandNames) {
 Write-Host ""
 if ($verifiedCommand) {
     Write-Host "  Visa CLI $visaVersion installed." -ForegroundColor Green
-    Write-Host "  Run '$verifiedCommand setup' to get started." -ForegroundColor Cyan
-    Write-Host "  After setup, run /mcp inside Claude Code, not PowerShell, if Claude Code was already open." -ForegroundColor Cyan
+
+    # Hand off straight into setup so install -> setup -> signed-in is one
+    # uninterrupted flow. Hardening:
+    #  * Auto-launch only on an interactive console with input/output/error
+    #    all attached - setup must prompt and open a browser. Redirected
+    #    streams and CI fall back to printing the next step.
+    #  * Invoke $verifiedCommandPath (the path verified just above), not a
+    #    bare command name re-resolved through PATH.
+    #  * Pass only the literal "setup" argument - nothing caller-controlled.
+    if ($Host.Name -eq 'ConsoleHost' -and -not [Console]::IsInputRedirected -and -not [Console]::IsOutputRedirected -and -not [Console]::IsErrorRedirected -and -not $env:CI) {
+        Write-Host ""
+        Write-Host "  Continuing to setup..." -ForegroundColor Cyan
+        Write-Host ""
+        try {
+            $setupProcess = Start-Process -FilePath $verifiedCommandPath -ArgumentList @('setup') -Wait -NoNewWindow -PassThru -ErrorAction Stop
+        } catch {
+            Write-Host ""
+            Write-Host "  Setup could not start. Visa CLI is installed." -ForegroundColor Yellow
+            Write-Host "  PowerShell error: $($_.Exception.Message)" -ForegroundColor Yellow
+            Write-Host "  run '$verifiedCommand setup' when you're ready to finish." -ForegroundColor Yellow
+            Wait-BeforeExit
+            exit 1
+        }
+        if ($setupProcess.ExitCode -ne 0) {
+            Write-Host ""
+            Write-Host "  Setup exited before completion. Visa CLI is installed." -ForegroundColor Yellow
+            Write-Host "  run '$verifiedCommand setup' when you're ready to finish." -ForegroundColor Yellow
+            Wait-BeforeExit
+            exit 1
+        }
+        exit 0
+    } else {
+        Write-Host "  Run '$verifiedCommand setup' to get started." -ForegroundColor Cyan
+        Write-Host "  After setup, run /mcp inside Claude Code, not PowerShell, if Claude Code was already open." -ForegroundColor Cyan
+    }
     Write-Host ""
 } else {
     $primaryCommand = $cliCommandNames | Select-Object -First 1

package/install.sh

@@ -99,16 +99,42 @@ fi
 echo "$NPM_OUTPUT"
 
 # ── verify ────────────────────────────────────────────────────────────────────
+# Capture the absolute path resolved here so the setup hand-off below invokes
+# exactly the binary we just verified, instead of re-resolving "visa-cli"
+# through $PATH a second time.
+VISA_BIN=""
 VISA_VERSION=""
-if command -v visa-cli &>/dev/null; then
-  VISA_VERSION="$(visa-cli --version 2>/dev/null || true)"
+if VISA_BIN="$(command -v visa-cli 2>/dev/null)"; then
+  VISA_VERSION="$("$VISA_BIN" --version 2>/dev/null || true)"
 fi
 
 echo ""
 if [ -n "$VISA_VERSION" ]; then
   ok "Visa CLI ${VISA_VERSION} installed."
-  info "Run 'visa-cli setup' to get started."
-  info "After setup, run /mcp inside Claude Code, not Terminal, if Claude Code was already open."
+  # Hand off straight into setup so install -> setup -> signed-in is one
+  # uninterrupted flow. Hardening:
+  #  * Auto-launch only when stdin/stdout/stderr are real terminals — setup is
+  #    interactive (browser sign-in, Touch ID). Piped installs, redirected
+  #    output, and CI cannot prompt cleanly, so they print the next step.
+  #  * Invoke "$VISA_BIN" (the path verified just above), never a bare
+  #    "visa-cli" re-resolved through $PATH at call time.
+  #  * Pass only the literal "setup" argument — "$@" is never forwarded — so
+  #    nothing the script's caller controls reaches the installed binary.
+  if [ -t 0 ] && [ -t 1 ] && [ -t 2 ]; then
+    echo ""
+    info "Continuing to setup..."
+    echo ""
+    "$VISA_BIN" setup || {
+      echo ""
+      warn "Setup exited before completion. Visa CLI is installed."
+      warn "run 'visa-cli setup' when you're ready to finish."
+      exit 1
+    }
+    exit 0
+  else
+    info "Run 'visa-cli setup' to get started."
+    info "After setup, run /mcp inside Claude Code, not Terminal, if Claude Code was already open."
+  fi
 else
   warn "Installed, but 'visa-cli' was not found on PATH."
   warn "You may need to restart your shell, then run: visa-cli setup"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@visa/cli",
-  "version": "2.1.0-rc.5",
+  "version": "2.1.0-rc.7",
   "description": "AI-powered payments for Claude Code",
   "bin": {
     "visa-cli": "./bin/visa-cli.js"

package/server.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://static.modelcontextprotocol.io/schemas/2025-10-17/server.schema.json",
   "name": "io.github.visa-crypto-labs/visa-cli",
-  "version": "2.1.0-rc.5",
+  "version": "2.1.0-rc.7",
   "title": "Visa CLI",
   "description": "AI-powered payments and creative tools for coding agents. Generate images, music, video, query crypto prices, and make purchases — all from your AI coding assistant.",
   "websiteUrl": "https://github.com/Visa-Crypto-Labs/Visa-mono/tree/main/packages/cli#readme",
@@ -9,7 +9,7 @@
     {
       "registryType": "npm",
       "identifier": "@visa/cli",
-      "version": "2.1.0-rc.5",
+      "version": "2.1.0-rc.7",
       "transport": {
         "type": "stdio"
       },