@visa/cli 2.1.1-rc.2 → 2.1.1-rc.4

package/native/visa-keychain.m

@@ -15,6 +15,24 @@ static NSString *kService   = @"visa-cli";
 static NSString *kKeyAcct   = @"attestation-key";
 static NSString *kTokenAcct = @"session-token";
 
+static NSString *spkiPublicKeyB64(SecKeyRef key) {
+    SecKeyRef pubKey = SecKeyCopyPublicKey(key);
+    if (!pubKey) return nil;
+
+    CFErrorRef pubErr = NULL;
+    CFDataRef rawPub = SecKeyCopyExternalRepresentation(pubKey, &pubErr);
+    CFRelease(pubKey);
+    if (!rawPub) {
+        if (pubErr) CFRelease(pubErr);
+        return nil;
+    }
+
+    NSMutableData *spki = [NSMutableData dataWithBytes:SPKI_HEADER length:sizeof(SPKI_HEADER)];
+    [spki appendData:(__bridge NSData *)rawPub];
+    CFRelease(rawPub);
+    return [spki base64EncodedStringWithOptions:0];
+}
+
 // ---------------------------------------------------------------------------
 // Keychain helpers for generic password items
 // ---------------------------------------------------------------------------
@@ -90,27 +108,59 @@ int cmd_generate_key(void) {
     NSString *privB64 = [(__bridge NSData *)rawPriv base64EncodedStringWithOptions:0];
     CFRelease(rawPriv);
 
-    // Export public key in SPKI DER format
-    SecKeyRef pubKey = SecKeyCopyPublicKey(privKey);
+    NSString *pubB64 = spkiPublicKeyB64(privKey);
     CFRelease(privKey);
-    if (!pubKey) { printf("ERROR:Failed to get public key\n"); return 1; }
-
-    CFErrorRef pubErr = NULL;
-    CFDataRef rawPub = SecKeyCopyExternalRepresentation(pubKey, &pubErr);
-    CFRelease(pubKey);
-    if (!rawPub) {
-        if (pubErr) CFRelease(pubErr);
+    if (!pubB64) {
         printf("ERROR:Failed to export public key\n");
         return 1;
     }
 
-    NSMutableData *spki = [NSMutableData dataWithBytes:SPKI_HEADER length:sizeof(SPKI_HEADER)];
-    [spki appendData:(__bridge NSData *)rawPub];
-    CFRelease(rawPub);
-
     // Output both keys: OK:<private-b64>:<public-spki-b64>
-    printf("OK:%s:%s\n", privB64.UTF8String,
-           [spki base64EncodedStringWithOptions:0].UTF8String);
+    printf("OK:%s:%s\n", privB64.UTF8String, pubB64.UTF8String);
+    return 0;
+}
+
+int cmd_public_key(void) {
+    NSFileHandle *input = [NSFileHandle fileHandleWithStandardInput];
+    NSData *stdinData = [input readDataToEndOfFile];
+    NSString *keyB64 = [[NSString alloc] initWithData:stdinData encoding:NSUTF8StringEncoding];
+    keyB64 = [keyB64 stringByTrimmingCharactersInSet:[NSCharacterSet whitespaceAndNewlineCharacterSet]];
+
+    if (!keyB64 || keyB64.length == 0) {
+        printf("ERROR:No key provided on stdin\n");
+        return 1;
+    }
+
+    NSData *rawKey = [[NSData alloc] initWithBase64EncodedString:keyB64 options:0];
+    if (!rawKey) {
+        printf("ERROR:Invalid base64 key data\n");
+        return 1;
+    }
+
+    NSDictionary *keyAttrs = @{
+        (__bridge id)kSecAttrKeyType:  (__bridge id)kSecAttrKeyTypeECSECPrimeRandom,
+        (__bridge id)kSecAttrKeyClass: (__bridge id)kSecAttrKeyClassPrivate,
+        (__bridge id)kSecAttrKeySizeInBits: @256,
+    };
+    CFErrorRef importErr = NULL;
+    SecKeyRef privKey = SecKeyCreateWithData(
+        (__bridge CFDataRef)rawKey,
+        (__bridge CFDictionaryRef)keyAttrs,
+        &importErr);
+    if (!privKey) {
+        if (importErr) CFRelease(importErr);
+        printf("ERROR:Failed to import key for public export\n");
+        return 1;
+    }
+
+    NSString *pubB64 = spkiPublicKeyB64(privKey);
+    CFRelease(privKey);
+    if (!pubB64) {
+        printf("ERROR:Failed to export public key\n");
+        return 1;
+    }
+
+    printf("OK:%s\n", pubB64.UTF8String);
     return 0;
 }
 
@@ -299,6 +349,7 @@ int main(int argc, const char *argv[]) {
         }
         const char *cmd = argv[1];
         if      (strcmp(cmd, "generate-key") == 0) return cmd_generate_key();
+        else if (strcmp(cmd, "public-key") == 0) return cmd_public_key();
         else if (strcmp(cmd, "sign") == 0) {
             if (argc < 3) { fprintf(stderr, "Usage: visa-keychain sign <challenge> [reason]\n"); return 1; }
             return cmd_sign(argv[2], argc >= 4 ? argv[3] : NULL);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@visa/cli",
-  "version": "2.1.1-rc.2",
+  "version": "2.1.1-rc.4",
   "description": "AI-powered payments for Claude Code",
   "bin": {
     "visa-cli": "./bin/visa-cli.js"

package/server.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://static.modelcontextprotocol.io/schemas/2025-10-17/server.schema.json",
   "name": "io.github.visa-crypto-labs/visa-cli",
-  "version": "2.1.1-rc.2",
+  "version": "2.1.1-rc.4",
   "title": "Visa CLI",
   "description": "AI-powered payments and creative tools for coding agents. Generate images, music, video, query crypto prices, and make purchases — all from your AI coding assistant.",
   "websiteUrl": "https://github.com/Visa-Crypto-Labs/Visa-mono/tree/main/packages/cli#readme",
@@ -9,7 +9,7 @@
     {
       "registryType": "npm",
       "identifier": "@visa/cli",
-      "version": "2.1.1-rc.2",
+      "version": "2.1.1-rc.4",
       "transport": {
         "type": "stdio"
       },