@visa/cli 4.1.0-rc.121 → 4.1.0-rc.123

package/README.md

@@ -128,9 +128,9 @@ receives a delegated, capped, revocable signer (it can never mint one itself).
 With a wallet delegated, set caps before funding:
 
 ```bash
-visa wallet limits --per-transaction 0.25 --daily 2.00   # BEFORE any funds arrive
-visa wallet show                                          # address, network, policy
-visa wallet fund                                          # funding instructions
+visa wallet limits --agent <agent-id> --per-transaction 0.25 --daily 2.00
+visa wallet show --agent <agent-id>                       # address, network, policy
+visa wallet fund --agent <agent-id>                       # funding instructions
 ```
 
 Fund the wallet with USDC only after limits are set. Payments are gasless — no ETH is ever needed. Mainnet (Base) is the production default; set `VISA_V4_NETWORK=base-sepolia` for testnet, where `visa wallet fund` points at the faucet.
@@ -140,9 +140,9 @@ Fund the wallet with USDC only after limits are set. Payments are gasless — no
 ```bash
 visa find "current weather by city" --max 0.10   # discovery; spends nothing
 visa inspect <listing-id>                        # fetches the live 402 challenge; spends nothing
-visa pay <listing-id> --max 0.05                 # policy check → sign → settle
-visa activity                                    # recent payments
-visa receipt <receipt-id>                        # journaled proof with on-chain tx
+visa pay <listing-id> --agent <agent-id> --max 0.05 # policy check → sign → settle
+visa activity --agent <agent-id>                    # recent payments
+visa receipt <receipt-id> --agent <agent-id>        # journaled proof with on-chain tx
 
 # Advanced direct-URL mode uses the same probe, policy, and receipt path.
 visa inspect --url https://provider.example/paid
@@ -156,6 +156,11 @@ owned by `apps/mpp`, and VIC uses the checkout/mandate surface. Unsupported
 rails are refused before signing. The wallet exposes no agent key-export
 command.
 
+Each wallet-enabled agent has an isolated Turnkey credential, policy, journal,
+receipts, and paid-response directory. `--agent` / the MCP `agent` field may be
+omitted while exactly one wallet authority exists; with multiple authorities it
+is required so the CLI never guesses which agent can spend.
+
 ## MCP tools (v4 surface)
 
 | Tool | Description |
@@ -256,8 +261,9 @@ visa-cli feedback                   # submit feedback
 | `~/.visa-cli/pairings/` | Pending ceremony verifier or runtime identity key (owner-only mode 0600 on macOS/Linux; v2 pairing currently disabled on Windows) |
 | `~/.visa-cli/agents/` | Activated agent identity, runtime private key, and signed activation credentials (owner-only mode 0600 on macOS/Linux; v2 pairing currently disabled on Windows) |
 | `~/.visa-cli/session-recovery/` | Pending login-only PKCE verifier and pinned web origin (owner-only mode 0600 on macOS/Linux) |
+| `~/.visa-cli/removed-agents/` | Records of agents deleted on the server, kept 30 days then dropped. Written automatically; nothing reads it |
 | `~/.visa-mcp/agent-credential.json` | Legacy checkout-credential compatibility record (mode 0600) |
-| `~/.visa-v4/policy.json` | Wallet spend policy — never edit by hand; use `visa wallet limits` |
+| `~/.visa-v4/agents/<agentId>/` | Per-agent Turnkey credential, spend policy, reservation journal, receipts, and paid responses — never edit by hand |
 
 ## Troubleshooting