@visa/cli 4.1.0-rc.159 → 4.1.0-rc.160

package/dist/checkout-engine/cli-engine.d.ts

@@ -128,6 +128,18 @@ export type CliStartMandateInput = {
      * "written by the agent" block — provenance for the human, never trusted.
      */
     intent?: string;
+    /**
+     * Per-call relay of the hosted-approval URL, the moment it is known and
+     * BEFORE the (up-to-timeout) wait. Takes precedence over the engine-level
+     * `deps.onApprovalUrl`.
+     *
+     * The engine seam was deps-only, and the MCP surface builds its engine once
+     * per process without it — so `start_card_mandate` produced an approval URL,
+     * printed it to stderr, and blocked the agent's turn for minutes with no way
+     * to tell the human what to open. A per-call hook lets one caller relay the
+     * URL without every caller sharing one engine-wide callback.
+     */
+    onApprovalUrl?: (url: string) => void;
 };
 export type CliClaimMandateInput = {
     /** Optional local card-capability selector (legacy name or exact request-key JKT). */

package/dist/checkout-engine/cli-engine.js

@@ -379,7 +379,7 @@ export function createCliCheckoutEngine(deps = {}) {
                 consumerEmail: input.contact.email,
                 budget: true,
                 agentJkt: registerCap.agentJkt,
-                onApprovalUrl: deps.onApprovalUrl,
+                onApprovalUrl: input.onApprovalUrl ?? deps.onApprovalUrl,
                 maxDraws: DEFAULT_MANDATE_MAX_DRAWS,
                 ...(input.perTransaction !== undefined ? { perTransaction: input.perTransaction } : {}),
                 ...(input.intent !== undefined ? { intent: input.intent } : {}),